Is there a list of all URLs required for AutoPilot to work? 
Trying to get this working from an on-prem secured network has been pretty painful - still haven't gotten it working yet. It would be great if there was a comprehensive list of all required URLs/IPs/ports, including calling out exactly what URLs don't permit TLS inspection. Also, do you think at some point there could be a troubleshooting tool similar to what O365 has that automatically determines your tenant, tests all the required URLs, etc. and gives you a report of what's working, what's not, and what configuration changes need to be made?