$ 0 0 Dave, what version of XG are you using? I mean MR1 or MR2? Also does a User policy rule exist? I mean LAN to WAN from a clientless-user? Thanks.