@pflarini 

Hi

Functions such as content filtering are restricted based on the device's MAC, but devices with private MAC addresses will change the MAC address to bypass this restriction.
It is recommended that you add all private MAC addresses of the device to the profile. Usually there will be different private MAC addresses for 2.4G and 5G connections.
Or you could also consider turning off private address:
For IOS devices: Setting -> WLAN -> tap on the blue info icon at the left of the deco Wi-Fi name -> disable the Private Address feature.