What you need to do is:
- License the firewall (you must do this first)
- In the step where you choose the 'Default_SSL_Cert', instead you must choose the 'MFE_Communication_Cert' as the cert to use for replication between the firewall and Profiler. The documentation is wrong. It is in the process of being fixed.