Default Profile for New Devices
At the moment all new devices joining the network follow the general network settings.
Once joined they're manually added to a custom profile and content restrictions (via subscription)
However, as discovered devices which rotate their Mac address, forgotten or removed and rejoin the network go back into general settings without an associated profile.
This is problematic with people who know this and do this to bypass profiles and filters