In a Steelhead appliance deployment, the customer decides to use Full Transparency and block all incoming/outgoing TCP connections on port 7800 on their firewall. However, they are finding all TCP connections are passing through the Steelhead appliances (even ones that should be optimized via the in-path rule set).

If Full Transparency uses the original IP addresses and TCP ports for inner connections, what is the most likely cause of all TCP connections passing through the Steelhead appliances?