Authentification with MFA nonfunctional if the restrictions are activated

Hello, We are in the test phase and we are having a problem.
we want our users to authenticate with the MFA from an internet connection. When our users are in the corporate network we don't want MFA
So we added google authenticator , then activated the mfa for everyone . MFA works.
we then applied a restriction on an ip list (10.0.0.0 -10.255.255.255.) so that our internal users do not have MFA .
The modification works but even if I connect with another ip than 10.0.0.0/8, I don't have MFA.
I did a test by creating new gateways just for my external access (from the internet)
I reversed the policy by disabling MFA except for these 2 gateways, the result remains the same.
Does anyone else have the same issue as me?
I really think it's a bug...

 

Hi David,
The latest version 18.3 had include\exclude for MFA. Please, check and share what restriction do you use.