Users cannot open links that were sent to them inside email. The page loads and says not found or disconnected. However, I was able to open the page with the same policy applied. The only way the user can use the site is to add the site to exclusion list one at a time.
Created a specific policy for the user, however, antiphsihing and traffic scan needed to be unchecked for the site to work.