You can use the command >system support trace the result tells you which policy generates the block.example.more informationhttps://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212321-clarify-the-firepower-threat-defense-acc.html