It's categorized by Protocol, Ports, Destination IPs, and Domain. You can see the same when you build custom apps. With Cato I found the domain to be a bit specific. So if you are including your customer name prior to the root domain Cato doesn't normally catch this. What you will need to do is build a Custom App to include your domains and anything else to better categorize it (e.g. Web would be Port 443). Then add that Custom app to your existing Rule. This should expand the Native Layer 7 Apps they have built in matching either the Native or your custom app.