the firebox does not drop some new vpn tunneling like :
I cannot get to the point where App Control would do anything, because when I try to go to the web site you linked, WebBlocker blocks it as Proxy Avoidance. If I bypass that block and try to download the file for Windows, that gets blocked by HTTPS DPI due to the Windows EXE/DLL blocking.
Do you use HTTPS with content inspection enabled?
Fireware 12.5.1 build 601804
WSM 12.5.1 build 601717
ISP = Spectrum Cable 100 x 10 service
Management computers: Win 8.1 Pro 64-bit, Win 10 Pro 64-bit, Server 2012 R2
Users can download the app on their phones or laptops off site for example.