Then that is normal. Because the AP performs a NAT step for your wireless clients, anything coming from them seems to come from the AP in your MX's eyes. So it's one of your wireless clients getting blocked.
If you don't want that you either have to do the content filtering on the AP (for example using Umbrella) or change the mode to bridge mode.