Yes, that is expected. You can do content filtering globally, but you can only do per-user content filtering when the MX is the default gateway for the client. Content filtering is based on the MAC address. Unique client identifier is only used for reporting in the dashboard.
... View more