Hi Bruce/all, Just seen this post.. this is exactly what I am trying but reverse of this post. Please could I have some guidance. Looking have a SSID that is open but blocked but default and I allow specific Macs addresses through.  I see the client add them to policy group.  But where do I add the default block?? Firewall settings??  Client add bypasses the firewall rules.. which means to can get onto my local network?? Any help appreciated   Jas ... View more