Hi,
Try opening up HTTP and HTTPS ports to these specific destinations:
ccmdls.adobe.com
ims-na1.adobelogin.com
lm.licenses.adobe.com
na1r.services.adobe.com
prod-rel-ffc-ccm.oobesaas.adobe.com
ccmdl.adobe.com
swupmf.adobe.com
You may have to add them a few times from a Domain Name Set, URL Set and Computer Set
It might get you a bit further, but then you may get to the point where I'm stuck at - where an RST packet drops a session, and I'm not able to update Creative Cloud.