DPF blocks legitimate Outlook autodiscover

Since last week Outlook can't reach autodiscover on our Exchange host — the DPF filter is treating the autodiscover.xml lookup as telemetry and killing it. Whitelisting the domain in the portal didn't help. Email works but every Outlook launch throws a certificate/connection error first.