Protected content seen by visitor

I've got several pages that should not be seen by anyone but a registered user, but I'm able to access them when I'm not logged in.

I have the pages set as Negative Rules under the Visitor Level in Access Levels. I have them listed under a URL group.

Here's a page that should not be accessible to someone who hasn't registered:

Any idea what I might be missing?