Hi Tim
Workflow is as follows:
1. Device connects to existing SSID gets IP address.
2. Device gets put into new role based on User Defined Rule already configured based on MAC address.
3. New role has firewall policy 'allow all' assigned
4. Device access internet.
I have configured the UDR but the device is staying in the pre-auth role which forwards it to the captive portal. I guess I'm slightly confused with how the flow should be.Thanks