Tunneled traffic using CONNECT is allowed when the destination port is not 443