Cannot access some https sites

Hi Guys, I have an issue with this implementation of LC 1600 9.4.8. The F5 LC is sitting in between the router and the firewall. After a week of implementation, client says that some of the users cannot access some HTTPS sites. I instructed the client to connect the laptop directly to F5 to check if it would work, and indeed it is working. Our configuration: vs_outbound any:any perfL4 snat enabled address and port trans disabled The problem also is that not all users are affected and not all sites are problematic. When I do tcpdump on the internal and external interface of the F5, I can see the https traffic traversing our F5 unit. I insist to check their firewall because the last transaction is going to the firewall and also it is working if I connect directly to F5. We tried adding outbound https: vs_https any:443 snat enabled address and port translation disabled The problem was resolved by adding this config. Problem is weird and the solution is also weird. Am I wrong to say that it is not an F5 issue or am I right when I said that what we did was just a workaround? Since we already have the VS any:any, I assume that all traffic will be allowed to go outside. But base on our experience, we need to create specific virtual server for ftp, smtp and now https just for them to pass F5. By the way, this is a migration project from old bigip 1000 to Big ip 1600. So they cant help but compare their old infra to the new one. Hope you could shed light on this issues. Thanks guys