No DPI for specific port

You are using a DNAT Rule? Port 8443? 

Then you try to Scan the reversed connection?

Because your Firewall Rule is WAN to LAN - Indicating you are using DNAT.

Your SSLx Rule will use LAN to WAN Port 8443. 

SSLx will not be activated for WAN to LAN Traffic. If the connection was built by WAN to LAN, the back Packets will not be inspected. 

That is a bad message ;( so there is no solution to decrypt it ? Weird is that when i switch to not use DPI but webproxy it works.. tested malwares are blocked ;)

Roman,

this is the expected behaviour. You can mitigate layer 7 attacks (http/s only) by using WAF instead of a DNAT rule.

So your sugestion is to use WAF instead of DNAT. ? if so ill try to use it ;)

So your sugestion is to use WAF instead of DNAT. ? if so ill try to use it ;)