There is a known limitation if you want to activate this feature with a User Traffic Profile. In that case you need to assign a URL filter in WLAN, plus the one you are using in User Traffic Profile (UTP). UTP policy (and URL filter inside) will take precedence over the one assigned at WLAN level.
I have a question in relation to precedence on URL filtering and Application Control. If a URL category is allowed but Application Control policy denies it, URL category policy will take precedence, right? So traffic should be blocked. What if my URL category is allowed but I have a Rate Limiting Application Control policy? What will happen with the web traffic? Will rate limit take effect?
Another thing I noticed. Peer to Peer is blocked on URL filtering but we still see Peer to Peer application with huge bandwidth usage. I have a UTP applied on the WLAN with both URL filtering and Application policy set.