Help with Aruba Instant NAT policy.

I'm trying to use our firewall to content filter by IP range. 

The issue is that our Aruba Virtual Controller broadcasts 3 SSIDs, each with a different IP range (192.168.1.x, 192.168.2.x, and 192.168.3.x).

The problem seems to be that the NAT rules in the virtual controller are funneling all traffic back to our main IP range (192.168.1.x). 

Any idea on what to do to turn of NATing in Aruba Instant?