I am using security intelligence in my firepower system to block and white-list URLs however, it seems to be not working it still goes to the verdict of my access control list and not the security intelligence.
As per the packet flow of FTD, the blacklisted traffic in SI config will be dropped. It seems your whitelisted URL's is going through the ACL policies which seems to be a normal behavior.
The whitelisted policies only whitelists the specific URL's defines in the blacklists.
I am attaching a snapshot of Packet flow in FTD software code
