Domain and sub-domains are being blocked even though they are allowed in policy