Please be advised that publication from December 14th 2021 advised of changes to URLs that are being used for Device Setup, Management and Software Updates.
The default CloudApp categories are not sufficiently up-to-date or present for this.
So you may need create a custom URL Category and add it to SSL Bypass.
We’ve noticed this ourselves recently when we’ve been addressing new updates. This was extremely noticable yesterday regarding the 0-day patch release from Safari. Also it stopped XCode