Hello, did you tried with:
.*
In case it doesn't work, what's the final goal? If you need to allow only a few sites and block all the others you can use the Access Policy per domain instead of based on webfilter and define a policy for allow only the websites that you need.
For example this access policy will allow only the two websites listed and blocks all the other websites from the GREEN zone.