You are right, I have tested it again and HTTPS is working since the firewall cannot decode headers.