IP Spoofing Control and IPsource guard

hi.

I have set up IP spoofing control on my USG flex h which seems to work well but when I try and set up IPSG on my nebula controlled switches I get some switches disconnecting from nebula and clients been blocked even if I don’t have any ports selected.

I’ve added them to the list of allowed clients but it doesn’t seem to fix the issue.

Do I have to set it up in a particular order first? And Is it necessary to have both turned on or is it sufficient just to use the protections on the Zywall?

Thanks