I have a web security exception to allow me (my IP address) to pass the http/s scanning when need be. I had the exception disabled but I was still able to get to content that should be blocked. I was about to post about http/s scanning not working and I decided to change my IP address and see what happens. Sure enough I got blocked. So I went ahead and deleted the exception for my address, returned to my normal address and sure enough now I was blocked there too. The exception was clearly off (red). In fact that's something I see often when I tweak the exceptions and I always take note that it's off. I like to run through the filter just like everyone else so I can see if it's causing any problems.
