I have followining devices set up in my wifi network. OC200 controler to TL sg100SP POE switch and EAP 245V3 accese Pont.

I am trying to set up URL filtiring so  the users can only go to our payroll company . i created the allow and deny rule. When the Deny rule is enabled it blocks all traffic including accesse to our payroll company. The syntax that I am using must be missing somthing.  Any help would be apreciated