Restricting Acces by URL group not working for /tags

Hi
Some restricted content is still showing up in the archive list if you access it via the Tag Cloud - see -
http://www.students4work.co.uk/tag/berkhamsted/

I have tried adding a URL group for /tag as a negative rule but this didn't work, any ideas?
Regards
Mark