Micro app discovery breaks firewall rules

Question

I've been told that in order for application filter rules to work, Micro app discovery has to be enabled. Unfortunately, when it is enabled other things break. 
 I have created IP groups from all LAN hosts. I want some of them to be immune to any firewall processing so I created a rule on top:

to allow any traffic from these groups. But when micro app discovery is enabled, the rule is not followed, and secure traffic is simplify blocked. For instance my Amazon Echo devices go offline and my heat pump can't report status to the cloud. 
 Can someone help? The way it is now makes app policy useless.

Karlos · Answer

Hi Per-OlofLitby 
 Have a read at our KB Article regarding MicroApp Discovery: Sophos Firewall: Traffic filtered when HTTP/HTTPS scanning is disabled 
 Post 16.5 MR4, the default behaviour for MicroApp Discovery is disabled. Reason is "it forces all port 443 traffic to go through proxy with HTTPS scanning on regardless of Firewall Rule setting. It should be off for all normal production systems." 
 Cheers, 
 Karlos