Web Filter Profile with Endpoint protection not working well

Hello,

I have a sophos with 2 Ethernet legs, one connected to a bridged modem, and the other to the LAN (there is no domain),

I have a test vm computer on ESXi (sophos is on ESXi too), a Desktop and a laptop (that belongs to my partner).

I have created a test profile that blocks weapons sites (using sophos's web protection test site),

I want to create a web profile with specific computer groups to block them from entering certain sites, but to have all other computer groups free access.

the problem is, when i activate the profile, all of my computers are affected (i installed the AV in the desktop with disabling the web protection)