I think this setting only applies to the probing parsers, not to the 'pattern' based detection. So TLS detection is done on all streams. When we don't find the protocol on tcp/443, we will try harder using a probing parser. Right @poona?