I changed my XG firewall to use your setting in lieu of my specific application policy and was still able to connect to the site with full website pictures and links. So I am not clear as to what other changes or policies you have in place that could affect access? Do you use https decrypt and scan with XG certificate installed on your PC?