Block HTTP and HTTPS ports applies to DMZ... by design?

I’m not really convinced. Port blocking and proxy bypass are two different concepts…but if this the behavior users expect…ok.