Hi VooDooChris,
i also had such failures with several R80.x releases, each had small different beheaviours in URL Filtering. I think the Object "Internet" has got litte changes during the releases, which can lead to failures after upgrades.
For example in R80.30 (we are using HTTPS Inspection, this may could lead to different results):
Source: Office destination: Any Application: Own Application with FQDN + SSLv3/HTTPS
-> Was allowing only access to destinations in my Own Application, no other Internet Access with sslv3/https
With r81:
With Destination Any -> SSLv3/HTTPS was allowing more Internet Access than expected and contained in my own Application
With Destination Internet -> Only my own application was allowed
Without sslv3/https -> Traffic was not detected as own application and got blocked because https/sslv3
Some other thoughts on this topic, but may not relevant for your issue.
When using an Proxy, it may be necessary to add the Proxy IP in addition to "Internet" as destination.
When using non standard Webports, they could be also missing in Application Control.
best regards,
Sebastian