Traffic implicitly denied. Why?

Hi all!

Maybe a simple question, but I don't see it: Why is the traffic to Cloudflare-Web implicitly denied while the traffic to Xbox is allowed? 

Both connections use port 443...

Policy 44:

config firewall policy
edit 44
set srcintf "Name1"
set dstintf "wan1"
set action accept
set srcaddr "Name1 address"
set dstaddr "all"
set schedule "always"
set service "HTTPS" "HTTP"
set utm-status enable
set ssl-ssh-profile "deep-inspection"
set av-profile "default"
set webfilter-profile "block some & monitor-all"
set dnsfilter-profile "default"
set ips-sensor "high_security"
set application-list "block-high-risk"
set logtraffic all
set nat enable
next
end

I guess, that it has something to do with the item "Action" and "Security" below:

What engine performs this deny? Why is the security log empty?

Thanks for your help!

Oliver