CORS configuration

I’m trying to configure CORS for selective origin URL. It seems like my CORS is not working fine after configuration. It still allows any anonymous URL to call from. I can see that there is select statement from CORS config table. Could please advise how to troubleshoot and resolve the issue?