It should work both.

Can you disable the policy and enable it again and check