you should validate the following items:
- Has the URL filter list been successfully downloaded, e.g. is there a version number displayed for URL Filter in the Dashboard?
- Is the URL Filter setting configured to use both, local lookups + GTI (cloud) lookups?
- Does your request really hit a URL Filter rule, or is there maybe an exception that skips the rule execution?