User Group Object not Working for PF

Hey guys,

I rebuilt my ASG on the weekend due to a harddrive failure.
Now i've patched it back up to 8.304 and reloaded my config.

Now my issue is all my rules that refer to user group network object isnt work.

If i use the user object on its own it works, if i use the group object it doesnt.
an example rule is

Now that use to work, but now doesnt. but if i exchange that with the user object instead.
it works.

Authentication is done by the AAA Agent, Users are sync via ldap.
Now I know that AAA must be telling Astaro something because webproxy is using the correct profiles on each user.

ideas? if you need logs just tell me what i need to provide.