That's just the way it's supposed to be like: https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering#Patterns_for_Blocking_or_Allow_Listing_Specific_URLs https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/URL_Block_List_and_Allow_List_Patterns   "Although the URL "whitehouse.gov/blog" can be reached, the client will only be able to reach that URL. If the user tries to reach any other portion of the site that does not begin with that URL, they would be blocked. When very specific URLs are blocked (i.e. more specific than whitehouse.gov), it is advised to test the ability to reach the website. Other portions of that website may be stored in other areas of the web server, and this will cause the page to appear as broken." ... View more