@Tintronic Works for both - the purely WAN / Port forward one and the VPN ones as well

@Tintronic controller hostname/ip should be the internal LAN side IP of the controller, for example in my case its set to 192.168.0.230 which is my OC300 lan side IP Your port forward will be...

@YvesR You need to update the firmware on the router, and if you are using controller 5.15 or v6 bets you will get URL categories

@iansj7 Interesting, i havent seen this at all on my SG3428X either Static or LACP LAGs, in fact it has 2 of them configured and have been running without issue. What happens if you click "Apply...

@NeilR2 No it can be a hub. But routers can only be a hub if they have a static public IP address. If its behind NAT, CGNAT or a multitude of other ISP sheninagins they cannot be a hub Top and Bottom...

@Trevis What ACL rules do you have?