FQDN list doesnt work

SCalvanese — Wed, 19 Oct 2022 17:50:55 GMT

Hey all,

I created a simple FQDN allow list and added google.com. When I ping or curl google.com it only works sometimes. Any ideas?

Re: FQDN list dont work

ebenny — Wed, 19 Oct 2022 18:18:05 GMT

Hello @SCalvanese,

I saw your post and have a few recommendations for you. You may want to look at it initially,

The maximum number of address objects you can resolve for an FQDN is increased from 10 of each address type (IPv4 and IPv6) to a maximum of 32 each. However, the combination of IPv4 and IPv6 addresses cannot exceed 512B; if it does, addresses that are not included in the first 512B are dropped and not resolved.

FQDN can also be helpful to control other services that don’t relate to web browsing like FTP, ssh, or any other service.

As a workaround, it is possible to configure the rule with App-id [google-base] or by using a custom URL {google.com}, instead of using FQDN Object

Thanks and Regards,

Edison K Benny
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/cloud-ngfw-discussions/bd-p/Cloud_NGFW_Discussions
*Don’t forget to accept the solution provided!

topic FQDN list doesnt work in Cloud NGFW for AWS Discussions

FQDN list doesnt work

Re: FQDN list dont work