A standard site configuration separates agents by network segments (for example, Development might be a separate segment from Testing), and the agents might be on different networks than the Sun Update Connection – Enterprise server and the DM.
If this is the case, make sure that the ports for distrizor_port, agent_port, and server_port are open.