On the 9800 the problem is that once you apply a drop to a whole AVC category, everything in that category is denied straight away. That means your later mapping of LinkedIn as “business-relevant” never gets a chance to take effect because the category drop wins first. If you want LinkedIn to be allowed, you can’t drop the whole “social networking” bucket — instead you need to leave that category untouched and then explicitly set drop actions for the apps you don’t want, while keeping LinkedIn marked as relevant. In practice, exceptions only work if you build the policy at the individual application level, not by category.
–––
Best regards,
Stefan Mihajlov
Mark this post as Helpful if it helped you, and Accept as Solution if it resolved your question.
