Read this document:
http://hfnetchk4.shavlik.com/downloads/ShavlikHFNetChkProAndWinXPSP2.PDF
Shavlik HFNetChkPro requires access to either TCP port 139 or 445. Both of these ports are blocked by default after the installation of Windows XP SP2.
By configuring the Windows Firewall, either manually at each console, or centrally via Group Policy, it is possible to enable access such that the Shavlik HFNetChkPro console can perform patch scan and deployment functions, while the firewalled machines remain essentially ‘invisible’ to all other machines on the network.
This security stance increases the general security of the Windows XP SP2 machines on the network, while continuing to be protected by the industry leading Shavlik HFNetChkPro security patch management application.
The below referenced document provides detailed guidance for Shavlik HFNetChkPro customers who are installing Windows XP SP2.
http://hfnetchk4.shavlik.com/downloads/ShavlikHFNetChkProAndWinXPSP2.PDF