The status of SSO Agent on the firewall is abnormal(I don't see the green radio button under SSO ag

Question/Problem:

 I installed the version 4.0 on the 2012R2 and I don’t see the green radio button under SSO agents on firewall.  The agents themselves shows up as green.

Resolution or Workaround: 

Step 1: Be sure the SSO Agent is reachable from the firewall appliance.
Step 2: Turn off the firewall on the windows which SSO Agent is installed.