I make an exception for *.adobe.com because of this issue; but you could create a "log-all" URL-Filtering profile and attach that to a test machine and a test policy and see what URLs are actively being hit when you attempt this communication if you want to not utilize a wildcard.