Check the endpoint first

Before blaming a client, check the endpoint from the same machine. This request is unauthenticated on purpose:
A healthy server answers:
That 401 is the success case. It proves the endpoint is reachable, terminating TLS correctly, and advertising its authorization server. A timeout, a 50x, or an HTML error page means the problem is your network, not your config. Follow the chain one step further to see the permissions on offer:
Once connected, ask your agent to check your Copyleaks credit balance. If it answers, you are done.

Symptoms and fixes