Layer 3 switches with Access Control Lists prevent Symantec Web Gateway in span/tap mode from blocking URLs and displaying a block page.