When the Web Gateway is in Span/Tap mode, you see and experience many websites being blocked incorrectly. After adding the site(s) to the whitelist, you continue to see inappropriate malware detections and blocking pages.
There was an issue in Web Gateway version 5.2.5 which prevented the whitelist from being applied correctly. This is also paired with an issue detecting malware through Span/Tap which resulted in false positives.
This issue is resolved in Web Gateway version 5.2.6. Please upgrade at your earliest convenience.