Why this user or computer can access to internet ?!

Hello All,

With sophos xg in the company

AD authentication (stas and CAA)

I have may be 40 rules FW LAN > WAN, but all these rules are with "match known users", so  users or groups are presents

there is no rule witch allow mac@ pc or ip address pc or no authentication

So by chance i had computer joind to domain, but i open local session ,not domain session, with local administrator account

then i try google web browser and it access directly !! to internet

there is no rule witch matching user administrator account, and i opened local session on the computer!

 normally i will have two options:

1- no internet access or

2- redirecting to web portal ( for authentication)

but none of these two options

In this case , all who have computer and connect it to the network can access internet !!?

what happened?

Thank you for your feedback