Low success rate of active name resolution NetBIOS (failed rates 80%) andRdpTls (failed rate 90%).

First of all, once you have NTLMRpc and DNS working, at least from detection aspect you should be fine.
Now, to clear warnings, you can ask support for a report on which IPs are failing from those sensors, this will give you a clue as to what is blocked, but there is no way for Microsoft to remotely know what is blocking the coms, it could be a network firewall  or the target machien FW  itself...