How to configure web filter profiles with AD SSO correctly?

Hi @ all,

I'm stuck while configuring the web filter. Hope s/o can help me. Here's what I did 'til now:

1. created own URL Filtering categories
2. marked them on tab "URL filtering" (block these categories)
3. on webfilter profiles -> Filter action: modified the default content filter block action to block all security issues (e.g. spam..)
4. created additional filter actions: Filter.SocialNetworking; Filter.unwanted; Filter.Webmail
all with the created categories.

5. Filter Assignments -> created the needed assignements for the created filter actions
(Question: If I add a user/group here, this one will bypass the assignment. Right?)

6. Proxy-Profile -> created WFP.webmail with filter assignment FA.webmail, default content filter block action, standard mode, AD SSO für internal bridged (BrLAN) network.

==Result: Is working

7. created another proxy-profile (2), at position 1

==Result: proxy-profile (2) is working. The first doesn't work anymore.

8. Test: combined the 2 FA to one rule

==Result: only the first in order is used.

Basic configuration was done following THIS Article

(Just edited all AD-Groups from DN to simple Group name)

What I want to archive:
Have several filter profiles assigned to different users/AD Groups, while a user might be in more than one group. With the basic setting in our ASG future configuration can be done by adding users to the appropriate AD-group.

Hope you understand the problem and the goal. Can s/o give me some hints on how to accomplish this?

Thanks in advance!

LoD