@Clive_A Thanks for the background and the information. I guess my point was this is Apple[dot]com - so its a pretty critical site and service offering. It's not like this was a small website with a...

Its possible. Could just be a bug...not sure. Thanks! Have yet to reboot the gateway, but I dont think that will make a difference.

Im not using IPs in my block list. Im using the TP-Link provided "Location Group" as a the source of the block, which are country based. I only had to add an allow rule from the IP based on what...

I was able to setup a Location block as a base firewall rule. I am blocking all non-US/Canada websites under the Gateway ACL section using the "Location Group" and checking all countries except the...

@RaRu Thanks for the info! I dont have the MSP mode option (not sure I would do it anyway). Hopefully a future FW release will add/fix this. It seems like a basic request to monitor an ACL rule so...

@Clive_A Thanks for the idea. Not looking at doing DPI since the overhead on the WAN performance is too much. When DPI is enabled, my speed tests drop from 930Mbps to ~300Mbps. My main issue is just...