Reenabling Sandbox only works if CIS gets restarted

I found out that the Sandbox only starts to work correctly when it gets reenabled if I restart CIS.

Also, only if Sandbox is enabled, I get Alerts from Defense+. While it is disabled, D+ doesn’t alert anything and CLT gets a 0/340 Score. I double-checked if there were any rules for CLT in D+ and Firewall Settings, but there weren’t any.