AiProtection Accepting Config but not blocking

[jim99]

I'm trying to set AiProtection on my RT-AC86U router, running Asuswrt-Merlin vers 386.3_2. Web. Aps filter is "on" and I have selected all four check boxes, including "Streaming and Entertainment" (see attached screenshot). The router accepts the commands as applied. However, the target client (MAC address C4:85:08:xx:xx:xx) is still able to stream BBC iPlayer videos. I am running a SurfShark VPN, but symptoms don't change with it on or off.

Any comments/suggestions?