Hi,
Indeed this is not expected to be seen on client side and would cause issues. This normally means there is some "leaked" packet from the WAN that is bypassing the WAE and reaching the client directly, so you should try to trace the exact path of those packets.
I hope this helps,
Marco