I have blocked social applications like Instagram and Facebook on the staff-mobile wireless subnet. However, the issue now is that users can still access these applications, even though the deny action is clearly shown in the rule configuration. Please advise on the next steps to resolve this matter.