Microsoft Autopilot won't work - Intune - DLP and .cab

Hi,

I've been reading and tweaking the firewall policy rule to no avail.

• Made IP lists from official Microsoft web page.
• Allowed website and application from their official website.
• Tried with and without SSL Inspection
• The policy is put above almost everything else and nothing affect the IP subnet range

Autopilot won't work (often when choosing Office/365)

• Nothing is being blocked in FortiAnalyzer except for a few .cab
• We're thinking it might be linked to the .cab issue:
  
  • The DLP is still blocking some .cab
    • authrootstl.cab
    • disallowedcertstl.cab
    • pinrulesstl.cab
      • Even if the DLP HTTP-Get is activated or not
      • Even if the file filter for .cab is activated or not.
            Threat :Action: blocked
            Threat Direction: incoming
            Threat Name:data leak by Filter: none
            Threat Pattern: disallowedcertstl.cab
            Threat Severity: low
            Threat Type:Data Leak
        
        Any help appreciated.
        
        Thank you for your time.