TCP:SAE traffic blocked

[haxx]

I'm wondering why return TCP traffic with SAE or SA flags on port 443 is getting blocked quite often by a catch-all WAN firewall rule. I don't recall seeing so much blocked return traffic. The outbound request traffic is allowed (e.g. S or SEC) and the corresponding websites work.

I saw an old support request because packets were out of order due to a race condition. Wonder if that could be causing this.

Thanks in advance for any explanation.