Hi.
I have a default firewall policy configured like this and web filtering is not configured to any other firewall rule. I do not use HTTPS decryption.
Web filter works and I get a block message for denied HTTP sites and certificate error for HTTPS sites. This is as expected.
However, when looking at web filter logs and I filter "Log subtype Denied" I only get list of blocked HTTP sites and not HTTPS sites even when they were actually blocked from access, I do get logs of all allowed HTTPS sites.
What makes this even more confusing is the exception of "Advertisements" category which is denied and blocking gets logged even with HTTPS sites when they are categorized as advertisements.