temp
byod allow works
backup
redirect works, 1 policy