Symptom
The access policy, despite indicating the name of the WiFi network (SSID), also works for networks other than WiFi. It may also work for wired LAN devices.
Cause
If in a given access policy we do not specify the AP in network devices, such a policy will also work for ordinary LAN ports. The bug has been present since version 2.3.15.
Resolution
The fix will be in version 2.3.18. At the moment, you should always specify the network devices for which the given access policy is to work.
