I'm also having this issue. I don't see anything being blocked by my FWs and when running packet captures from my Site Server (where AdvancedInsights is installed), I don't see any traffic attempting to the destinations listed in the previously posted requirements doc. I expected that clicking the "Refresh Data" option on the errored panels would prompt attempts to the external endpoints but it doesn't seem to do that.