Do you have Send All enabled sending all your traffic to the Speed Fusion tunnel by default? If you want Domain Based rules to work, I would disable the Send All and only send traffic by outbound policy. Here’s a link to a post that has a working Domain Policy in it…