What firmware version are you running and what categories are you blocking? Version 16 doesn’t use Brightcloud anymore in favor of Talos.
and what about security center do you have advanced license and maybe it is blocked there?
- Ex community all-star (⌐⊙_⊙)