What happens if you just put the URL into a browser, and log in with basic credentials when prompted? does it return the data? Do you have securities set up like an API Key or Access Scope?
One other thing, I still don’t understand it fully, but when I first approached connecting to Epicor through REST, I remember Odata feeds requiring valid SSL certificates. See this post for more details.