Hi   You can just create a ACL for the other 2 networks as well and call them in class-map to be matched and redirected.   Example config here. https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.h...

Hi   You can add the SHA value of that to whitelist in your policy. If you believe the file is not malicious at all and should not be marked malicious globally, please open TAC case to request for FP analysis.   Hope it helps, Yogesh