Microsoft has a list of ports that should be opened for homegroup to work correctly here:
http://windows.microsoft.com/en-us/windows/networking-home-computers-running-different-windows#networking-home-computers-running-different-windows=windows-7
Adding a firewall rule on an unmanaged client is here:
Firewall policies on unmanaged Endpoint Protection clients
Open your SEP interface and select Options next to Network Threat Protection. The select Configure Firewall Rules.