You should track the URL Filtering logs for the blocks. Sometimes there can be HTTP redirects, if that's the case, it may not be logged to the URL Filtering logs. If that's the case and you can't find it, you can try going to the URL Filtering profile and uncheck the option to "Log container page only". You should also decide to try allowing: *.google.com google.com ... but this can result in allowing more access than intended. Hunting the URL's through the URL Filtering logs would be the best strategy if you wouldn't want to allow too much access to google.com. Once you're done troubleshooting, it is recommended that you check the "Log container page only" option under the URL Filtering profile to avoid excessive logging. Additionally, if the connection is HTTPS, and you have *no SSL Proxy* decryption implemented, the filtering will happen by a wildcard match to the CN presented on the SSL certificate. If that's the case, check out How to Block a Specific HTTPS Site with URL Filtering Mariano.
... View more
