Is this the proper filter exception settings for VO:

public - private port TCP 443 st enabled source-any dest-host-ipaddress
public - private port TCP 80 st enabled source-any dest-host-ipaddress