Enforcing SafeSearch on only one VLAN?

[rutman286]

I have a scenario where I do NOT want to enforce safe-search on the "parents" network on my firewall, which is the internal interface.  However, I want to enforce safe-search on the "kids" network, which is a VLAN on the internal interface.  

- internal interface 192.168.1.0/24

-kids VLAN 192.168.5.0/24

I have separate web filter profiles for the parents network and the kids network.  Filtering is in proxy mode.  I also have separate IPv4 policies for the parents network and the kids network.  Web filtering is applied to both policies.  The parents web filter policy is applied to the parents IPv4 policy, and the kids web filter policy is applied to the kids IPv4 policy.

The problem is, whenever I enable "enforce safe search" on the kids network, it gets applied to all browsers whether they are on the kids network on the parents network... can someone give me a hint of what I might be missing?