WIFI AP6-420e MAC Filter issues

Do you use Band Stearing? docs.sophos.com/.../index.html

Band steering is not ON.......  I was told you cannot have Advance Threat Protection on along with MAC filtering option.  However, with Advance Threat Protection turned on, I am still able to enable MAC filtering.   Not sure why this would be......

There is a documentation about this: 

https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/Wireless/SSIDs/SSIDAdvanced/index.html#hidden-ssid 

Thanks for your response...

Little sloppy to allow a customer to turn MAC filtering on when Active Threat Response is on.   No warning messages or anything other than it being in the "documentation" ......On top of that I would like to know the reason why both can't be used at the same time.   

Actually the Docs is not correct. We will address this one. 

You cannot use a Whitelist approach and ATR at the same time (Meaning, you Whitelist a MAC and block the same MAC at the same time). The Docs is misleading on that page. 

One step back here: 
Do you use white or blacklist in central? 
And if you say, the List is empty --> is it empty in Central or the Access point management itself? 

Actually the Docs is not correct. We will address this one. 

You cannot use a Whitelist approach and ATR at the same time (Meaning, you Whitelist a MAC and block the same MAC at the same time). The Docs is misleading on that page. 

One step back here: 
Do you use white or blacklist in central? 
And if you say, the List is empty --> is it empty in Central or the Access point management itself? 

We use whitelists only in Central>Wireless.  No idea where ATF is located in Central....as we do not have any Sophos Firewalls or Switches in our environment. 

I finally looked at the ATR and how it functions.....I can see this could be problematic....  However, there should/could be logic built in that that ATF MAC block would supersede the whitelisting.

At the very least give the customer the ability to granularly apply ATF to SSIDs that are not using the MAC whitelist......

The MAC list in the ATR located in Central>Wireless is/was empty before I disabled it.

Still stand by my comment.....If ATF is enable in Central>Wireless for AP6 then the MAC filtering option should be greyed out in the SSID.....

I turned off ATF yesterday 6/11.  Today, I check the 3 SSID that I have the MAC allowed function turned on.  All of them have one MAC address listed (same MAC address).  I added a list of MAC addresses to one SSID and save the configuration.

When I opened the other 2 SSIDs, the list of MAC addresses I entered in the one SSID were now populated in other 2 SSIDs MAC allowed lists.  Why would this be happening? Something is really wrong here.....