There are some known policy limitations when setting a rule to inspect mode.
When configuring a policy you can attach a download\upload profile that contains match criteria that won’t be enforced due to incompatible configuration thus resulting in a rule that can't take action. Below are the limitation scenarios.
We are currently working on allowing better and simpler ways to configure the policies and will be releasing the new and improved UI for Web Isolation in several months.