Dhaval,
Create a custom category with the URL that you want to allow access to. Commit the change
Create a new access policy above the policy that blocks the EXE.
In the new policy, in the "Policy Member Definition" section, pick the user, click "Advanced" at the bottom and pick the new category. In the "Objects" section, select "Define Custom Objects Settings" and set it up like you need it.
Hope that helps.
Ken
