After applying ENS 10.5.1 Hotfix 1, an ENS Firewall Location Aware Group with local networks defined using the subnet address type might not match corresponding traffic.