Resolved! Firepower not blocking URLs
Searching around I see a number of posts on the same subject, but these relate to v5.X software. Relevant bits of config: class sfr sfr fail-openuser-statistics accounting! class-map sfr match access-list SFR-REDIRECT ! access-list SFR-RED...