Yes, the device is firewalled, however everything it needs is allowed.
I’ve attached a packet capture showing the entire boot sequence.
Packet capture looks good: DHCP, ARP, NTP, then DNS for weather.opensprinkler.com and a HTTP GET for http://weather.opensprinkler.com/weather129.py
HTTP response has data.