Doubt about inspected protocols

Hi all, I have a doubt concerning the inspected protocols of the AV:For example I create a firewall pollicy:

-source all destination 192.168.1.1/32 TCP 32459 (With a VIP to MAP public traffic to my private LAN host).

I would like to use AV profile because the source of this traffic is ALL. But, really, anyone of the inspected protocols are in this traffic (not HTTP, not SMTP, not SNMP). Is traffic sourced by alarm to a server.

-If you don't use anyone of the inspected protocols in this conection (TCP 32459), and you disable all, the AV checks the TCP traffic of this TCP 32459 destination port?

-If you need to inspected this traffic. Which inspected protocols you need to enable if this connection not use , for example, HTTP.

Thanks all ¡¡¡

Regards