Office (click-to-run) update over proxy

Question

Hi,

we've blocked http/https to internet on firewall gateway and now we can't update ctr office with configured winhttp and ie proxy settings.

I can see some requests on proxy to f.c2r.ts.cdn.office.net, but a lot of requests go to non-official MS IP ranges (seen on firewall) bypassing the proxy and getting error 30183-27 (2147954552).

Allowing ip ranges on firewall gateway from next site doesn't help:

https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

Some IPs example seen on fw:
104.85.248.75 80

104.85.248.82 80

20.199.120.151 443