[Profile-base] Anti-virus rule to allow updates.

Hello,

I'm trying to create a simple rule to allow Bitdefender updates for the whole internal subnet.

For that , I've then create a new application control profile with all categories in monitor. Below, I've added an specific "Application and Filter Overrides" (See attach).

And the rule is this one

But the rule is matching all traffic going out with for 80/443.

What is wrong in my configuration ?

Thank you for helping.