To work correctly your XOA need to be able to access the following servers with HTTPS (TCP port 443):
For updating Citrix hosts this URLs should also been allowed
http://updates.xensource.com/XenServer/updates.xmlhttps://updates.xensource.com/XenServer/updates.xml