Add a URL exception

Question

Hello. I am trying to add a URL exception that is normally blocked by a web category. It's just a single domain so I just need an exception. I've done the following steps: 
 
 Objects > Content > URL Group Create a group and add the URL(s) 
 Protection > Web Protection > Web Filter Policies Add URL Group with HTTP/HTTPS allow. The order should not affect it, I think (the new URL Group is at the bottom of the list because its the latest entry. I have no option to reorder. 
 I then add the web filter to the existing Security Policy. By the way, the policy only applies to certain machines via a IP Host Group. 
 
 Anyway, the URL is still not being allowed and I am getting a login prompt (blocked warning page isn't working but that is a different issue). I just put the domain only (example: abc123.com). I'm not sure if I need to add a wildcard. 
 Any help is appreciated. 
 Thank you.

RichBaldry · Accepted Answer

Within a Web Filter policy, the order is important. If you want your URL Group action to override the action for the category, you will need to put it above the rule that blocks the original category. 
 It is possible to reorder the policy lines using drag and drop. As you move your mouse over the rows of the policy, you should see the pointer change to a four-way arrow. Click, and you can pick up a row and drag it to its new position. 
 Regards 
 Rich

lferrara · Answer

Trony, 
 as Rich wrote, inside the web filter you created (cloned from Allow All template) you can move categories and url group using drag and drop. See the screenshot.

For the login prompt page, configure Captive Portal where you have to make sure that unauthenticated users settings is configured as "Access denied" and "Custom Message".