opnSense + openVPN + XBox One = NAT issue

[a4p474]

I'm new to opnSense (switching over from ddWRT/openWRT) but trying to do as much research into my problem as I can.  I doubt I'm the first with this configuration but I cannot find a solution in the forum or on the web for my issues below.

1) I have the basic opnSense v21 install.
2) I disabled IPv6 per this tutorial: https://www.thomas-krenn.com/en/wiki/OPNsense_disable_IPv6
3) I installed NordVPN per their tutorial: https://support.nordvpn.com/Connectivity/Router/1292598142/OPNsense-19-1-setup-with-NordVPN.htm
4) I clustered my media players and game consoles into a .224/27 cluster, created an alias for the cluster, then added a VPN bypass rule for the cluster and placed it first in my rules list per this tutorial: https://www.youtube.com/watch?v=ov-xddVpxhc

My Issues:
A) my Rokus now play Netflix/Amazon just fine, but won't play the youtube channel
B) my XBox One gives me a Nat Type: Unavailable issue

I'd be very thankful if someone could point me to any threads that may have covered these issues?