Web Protection blocking websites categorized as Spyware.

• Your organization's policy prohibits access to websites categorized as Spyware.

I've added the site to the "web control customizations" and tagged it as "Allowed Websites" which have the action of "allow" in the base policy.

I've updated the client and waited 24 hours and I can still not access the site.

I've submitted the requets for reclassification to Sophos, but that states up to 5 days.

Am I missing something? Surely there should be a way to override the classifications, I thought adding the exception would work - am I doing something wrong?