We have a machine just for using to access special program which does
require to access one website. I have created a rule to allow this
machine to go through. Here are the two rules:

Action: allow
Access Type:Port
Service:Any
Transport: TCP&UDP
Source: specified (I put this machine's ip address here)
Destination: any

Action: allow
Access type: URL
source: specified (I put this machine's ip address here)
Desination: specified (I put https://*.xxx.com/* and http://*.xxx.com/*)

But it still pops up border login screen. What do I miss? Please advise!

Any response will be greatly appreciated!!!