it is not only when SSL policy enabled and DND (do not decrypt) rules configured. it happen again to me today. I just created a rule to block any URL with Adult Content and it exposed my server again. This product is getting you out of the market, to many dangerous bugs for years.
