When you enable "Protect users from the suspicious and malicious websites" in the new setup wizard it states "It does not scan the SSL traffic" by default and that you can enable it later.
When you look at the "Configuration Summary" it states that "Decrypt & Scan HTTPS" is Enabled and after the Boot if you check the firewall rule it is indeed enabled.
At this point in the deployment the Certificate Trust has not been established and as per the description on the "Network Protection" page the "Protect users from the suspicious and malicious websites"
Can you please make sure that the Wizard does not enable "Decrypt & Scan HTTPS" by default.
