APM /my.policy and AFM

working with a simple APM policy on a virtual server (LTM+APM mode) with a logon VPE and not much else.

• once i enable AFM and configure it in firewall mode (so deny default) this doesnt work anymore.* when i allow access for the APM virtual server it still doesnt work.
• when i remove the logon VPE it works.
• when i remove the access policy it works.* when i attach the access policy again and put the AFM in ACD mode (so allow default) it works.

it seems the AFM is blocking something during the redirect to /my.policy procedure, anyone know what i need to allow to get this working in AFM firewall mode?