In this test case, you receive a timeout message, because the framing JSP does not have the custom tag.
Regardless whether the consumer system is whitelisted or not, the content is not displayed when the framing JSP does not include the ClickJacking protection custom tag.
If everything is correct, the browser returns a timeout message.