This issue has been raised in the xfinity support forums as well for over 18 months. They acknowledge xAS blocks Plex but have not come back with a solution. Port forwarding and manual port assignment fails to work. Changing the port number also fails. Approving individual IP addresses to the port also fails.
The only present solution is to disable xfinity Advanced Security.