I see this with a local system as well, one metro region is digitally encrypted however the remainder of the region isn't and is on analogue - anything coming through analogue comes up with an external tag (yes, running an encrypted TG patched voids the encryption on the analogue side)