Found an interesting one at the school using 7.380
There are a few students that do not have any security groups assigned to them where normally they would get a "Profile not Found" Astaro Error page when trying to surf through the HTTP Proxy
The way it's working now however is when the student hits the firewall, instead of getting rejected when auth hits and doesn't find a profile, it hits the profile that it's IP falls under then runs in the fallback action of that profile.