Since this was never flagged as solved:
Preston PHX's hint solved the exact same issue for me. After being properly categorized by urlfiltering.paloaltonetworks.com/query the paypal webhook messages arrived without issues.