Are the violations the result of the connections not being (or at least not being identified as) SSL? - Not necessarily because it is anyway a connection initiated in the opposite direction of the allowed connection. So, in theory it has to be identified as a violation @quaint-candle-18606