Firmware 8.5 and VLAN/Firewall with IOT devices

I believe I’ve figured out this problem, see Outbound Policy + Firewall + VLAN bug in firmware 8.5