Web Proxy, block direct ip on port other than 80/443

Hi all,
in default proxy filter i have enabled
-Block access to web sites using ip address
-Enable global blacklist
-Enable global whitelist
-Block file extensions
-Block porn sites by regular expressions on URL

in general webproxy page i have enabled
-Transparent with SSL
-Block HTTP and HTTPS ports

adv filter block works!
block direct ip work

but is not filtered

i need to block on firewall?
deny src lan dest wan proto !tcp80 / 443

You need to create a template-custom with a REDIRECT shorewall rules also for port 8080.

Otherwise, as you suggested, block the port 8080 on the firewall and make sure clients are using the proxy.