Krista,
Could you try to whitelist the following ArcGIS domains:
•http://*.arcgis.com <http://%2A.arcgis.com/>
•https://*.arcgis.com <https://%2A.arcgis.com/>
•http://*.arcgisonline.com <http://%2A.arcgisonline.com/>
•https://*.arcgisonline.com <https://%2A.arcgisonline.com/>
•http://*.esri.com <http://%2A.esri.com/>
•https://*.esri.com <https://%2A.esri.com/>
Thanks
Tony