Why the link can't be blocked?

Question

I am very tired because UTM 9 can't block the link successfully. 
 Following is the link 
 " https://scratch.mit.edu/explore/projects/all " 
 I tested follow Regular Expression : 
 " https://scratch.mit.edu/explore/projects/[all ] " 
 " https://scratch.mit.edu/explore/projects/[a-zA-Z0-9] " 
 When I use policy test, it shows blocked. However I try the user computers (total 10 different computers), it can be passed. 
 Include the last "Lego" Game link, this is the second link that can't be blocked. 
 
 Please help!

DouglasFoster · Answer

I think I repeated your problem because I repeated your mistake. 
 Escape all of the "/" characters -- replace them with "\/" -- and see if it fixes the problem. I do not have time to repeat my tests right now.

DouglasFoster · Answer

I should have seen this before. 
 The site is https. 
 I assume that you are not using decrypt-and-scan (https inspection). 
 Without https inspection, the FQDN is in the unencrypted part of the packet, but the path and query string are encrypted. It cannot match what it cannot see. 
 You have to enable https inspection for your regex to work. 
 I used to be a big fan of https inspection, but less so now. It solves some problems but it creates others. I intend to post a comprehensive explanation of my views sometime soon.

Björn Ebner · Answer

Regarding the CA Certified you imported at your Clients: 
 Maybe you did import it into "Certificates" and not "Trusted Certificate Authorities"? 
 It needs to be imported into "Trusted Certificate Authorities" because all other Certificates for Sites you open are created by this CA. 
 IE, Edge and Chrome use the Windows Certificate Store by default. If you imported it there it should be fine for this browsers. 
 On firefox I think there is an option to tell it to also use the Windows Certificate Store.