New Install / Double NAT / Web Filter *sometimes* works

Hi,

Giving Untangle a try as a web filter for "guest" users who require internet access.

I have a Cisco ASA firewall on my outside directly connected to a switch (which obv uses NAT). The Untangle server is sitting in another location, not directly connected to the firewall.

Untangle is set to be DHCP server for internal clients. Once receiving an IP address, a client can access the web fine and there appears to be no problems. Except the web filter only works sometimes. Entering bittorrent, at this moment I can get to it no problem. Five minutes ago I couldn't.

The clients receive the internal IP address of Untangle as the gateway and my true outside DNS servers as the DNS IPs (as assigned by ISP).

I recognize there are two faults here. One my Untangle box is not directly connected to my firewall and 2 I am using double NAT. Yet it does work! My confusion is why does it work only some of the time? The clients, upon receiving their Gateway of the Untangle box should surely be sending all their data through it regardless of bridge/dhcp mode.

Any comments???