Hi All for those with a seperate firewall:
For those running a standard external Firewall, that does not have upnp turned on, grant internal access to external access on UDP ports 19364,3478. You will also need to allow port 80,443 for the launcher if you are not already for normal web browsing.
For those running a Palo-Alto here are the settings i have had to create to get the game to work:
I created a Service that i called "eliteports" that used ports 19364,3478 over UDP
I then created a policy that allowed anything internal to access any external ip using the application id's: "quic", "stun" and "unknown-udp" over the eliteports service i created first.
For the updates you will also now for 1.2 (didnt need before!) to allow the application "http-proxy" through your common web browsing policy. i also added in the "cloudfront.net" in the Allowed URL filter but this may have been overkill.
I have spoken to palo-alto and they will look to make a custom app-id (But dont hold your breath ;-)