Make sure that:
The network environment is healthy and can reach Internet directly or through a web proxy.
DNS is available for both servers and endpoints.
There isn't an encrypted traffic inspection.
NTP services are already available with known servers or local ones (if available).
There isn't Network Address Translation (NAT) among the TIE servers or between ePO - On-prem and the registered TIE server database.