Do I need to modify the secondary's rules as well?
It is always the best choice, yes.
but would like to know which executables I need to add exceptions for
On the Primary, for KVM, it would use multi2_64.exe and the Secondary would use multisrv64 and multiplv64.
That said, if you continue to have issues, we are going to ask that you eliminate any 3rd party firewall and work to see that it is solid with Window's native.
Sean Drohan
Stardock Product Lifecycle Manager