TCP port 135 is used for Remote Procedure Calls (RPC). RPC is used by Microsoft to access servers over the network for database connections, mapping drives, etc. Therefore, you should NOT block this port on the server itself. However, you could block TCP port 135 from your local CCM LAN segment. Just make sure that TCP port 135 is NOT blocked between CCM servers within a cluster