I'm gonna be short do not expect too many answers as this is not directly up to Mikrotik but more to Sophos but might be we have people who use Mikrotik with Sophos as well.
So scenario: Mikrotik router is an edge router / firewall + Sophos XG Firewall between Mikrotik and LAN in a transparent bridge mode.
The specific problem I have is that if I apply an APP filter on Sophos main firewall rule Mikrotik Winbox gets blocked even if I open port 8291.
If I search policy entries I can't see anything similar to what would be mentioned to block Winbox. So I'm not sure what way Winbox works.
If someone has any experience with this kind of crap let me know. And sorry for disturbing your time. :)