We have created a rule for the the satellite so that only w/s with specific IP range should contact the satellite server, but we have seen that w/s that are not in that range can be seen contacting the satellite server. Is there any way to avoid this. ZCM10.2.2
This is how the rule is.

10.10.x.x/24 or
10.20.x.x/24 or

There is no check in the "Closest Server Default Rule" box