Simultaneous use of web filtering and app control

Hello everyone,

We are currently trying to use web filtering together with app control in the same rule and unfortunately cannot find a solution. We are looking for a solution for the following setup:

We operate some PCs in our production environment that are only allowed to access certain websites on the Internet. We have created a corresponding web policy for this, in which the allowed websites are stored as a permitted URL group and the default action is set to block. In future, however, Office 365 and other Microsoft cloud apps are to be used on these computers. As a first idea, we tried to add an application filter in which O365 is explicitly allowed to the existing rule. Unfortunately, access is still blocked by the web filtering.

Unfortunately, I have not yet been able to find a solution or suitable examples for combining the two features in a similar setup. Perhaps someone has an idea on how we could implement the requirements.