Can't exempt specific website to Captive portal

I'm trying to exempt google.com to captive portal but the browser still asking for login

Things i already did

-added google.com as fqdn service and point to port 80 and 443

-added the service to exempt destination/services

-made a policy for the exemption

   -from vlan of the user

   -to sd wan

   -source IP of the user

   -destination is the service i add