probably, you are seeing this behavior, as all traffic follows fast-path packet processing after initial phase ... so any change is not implemented till "first-packet" path is again consulted ...
So in order to resolve this, enter following command ...
set security policies policy-rematch
commit
regards