Good evening all. Am wondering if something broke or has changed on how to block the ER7206s gateway login page for admin access, while keeping the portal accessible. I had denied the gateway management login from the networks selected with TCP only selected as the deny rule and that did it just fine prior while retaining internet access, but currently it seems to have reverted back and has not blocked it on the networks wanted. Is there any advice or otherwise that I may be missing. The context is for a vendor guest use network for PCI compliance in not allowing access to private subnets with card readers / payment devices (ie sqaure, etc), which I am planning on setting the wireless network for Guest use to help, along with a PPSK network for Square use, but i want to make sure that this loophole is locked down again while still allowing a PPSK and Captive Portal for voucher code use. Thank you all