This might be caused by a customized exception page or a user defined exception page that will return the following response codes
- User defined exception or a customized exception page can return response code 200 Ok if you configure it to send this response code
- User defined exception or a customized exception page can return response code 302 return redirect, if you configure it to contain a logo of your company to be downloaded from web or FTP server
This also might affect the reporting of these web sites, and you will find some reports for denied web sites as allowed or redirected.