I Solved it by changing the rules to this:   1 |  Allow  |     Any    | 192.168.0.0/16 | Any      | Allow Local Access 2 |  Deny  |     TCP    |         Any           | Any      | Block Internet ... View more

Hello!   I probably would create an SSID and VLAN for the tablets, and then block access using L3 FIREWALL rule to the internet or an L3 FiREWALL allowing only access to the internal subnets. 😁 ... View more