We recently implemented "Sponsored Guest" splash page. I have noticed some users mobile phones have data usage though they are not authorized. I tried it myself and was able to connect to the network but not go through the portal and it will allow some app usage to pull data as long as it's not through the browser. Any thoughts on how to cut this off?   Here are my access control settings:   Association Requirements - Open Splash Page - Sponsored Guest Login Email Domains - Our corporate domain Duration - 1 day NAC - Disabled Group Policies - Disabled Captive Portal Strength - Block all access until sign-on is complete Walled Garden is enabled Walled Garden ranges - Our DHCP/DNS server Controller Disconnection Behavior - REstricted IP Assignment - Bridge mode VLAN tagging - On - Use a vlan that is segmented to only allow Inet traffic and no access to internal networks other than dhcp. Content filtering - Off Bonjour off ... View more