EDITED: BLUF, Rulz #2 you will see that the UTM "services" such as Web Proxy, WAF, DNS, DHCP, etc all take precedence over the Network Firewall rules. If you need to restrict devices from using those ports and protocols, you must do 100% of that configuration…

We have a Sophos UTM SG 125. We have two WAN links, our main one through our ISP and a 4G modem link setup in an active / standby configuration. (Uplink Balancing and Uplink Monitoring) When our main ISP connection fails, it fails over to the 4G cell…