I have a test page (http://www.iirp.org/trainer/wordpress/?page_id=86) that displays when I expect it not to. With the settings as they are I thought that I should land on my "No Access" page. Instead I can get to the page where I have protected content. The protected content does not show, so at least that is working.
I have the Shortcode visibility default set to No- Shortcodes are protected by default, protected content page set to No Access, and I have the Stranger level set to have positive rules for a few pages which does not include the testing page.