SC-CPA on SSG5 not function

HI PEOPLE

this is the issue, I have two zone trust and untrust, I have enable web-filtering with integrated surfcontrol, i have one policy from trust to untrust. and the configuraion of the custom profile is clone from ns-profile. But the clone profile not function.

Please What are the recomendantions? The firmware SSG is 6.3.0r21

THANKS