The clients need to use the MX as the default gateway for this to work (in case you have a layer 3 switch). Also it can take up to 10 minutes for a policy to take effect after you apply it.
Get notified when there are additional replies to this discussion.