Hi Tyler,
Thank you for the info. I'm not sure if I'm allowed to share the tag (my boss is away at the moment), but I did try some things as you suggested.
The tag is 'http'. The VSI warns about it not being https, and blocks the request (which is noted in the Chrome console). I changed the URL to 'https', and tested that. This time, I see a blocked request, but for a different URL. I can see the XML with a browser (a proper user agent) for both URLs. The difference between the 2 is that for the 'https' request, all URLs in the XML are 'https' except 1 (the VASTAdTagURI).
I'm not sure yet whether the SDK is preventing this behavior, or if it's just not getting any data from the server.