topic Re: Multple entries for "Allow specified fqdn when Enforce GlobalProtect Connection" in GlobalProtect Discussions

Multple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"

pavel.sharypov — Mon, 20 Jan 2025 21:17:00 GMT

Hi everyone,

Could you please help me to figure out what is the right format I should use to add multiple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"?

In the following support doc, I can see that I must put space before the wildcard character.

Enforce GlobalProtect Connections with FQDN Exclusions

Additionally, to separate multiple domain names I need to use only commas without space, but when I check attached screenshots, it clearly shows a space after commas. I am getting confused...

What would be the right formatting if I need to allow the following fqdns: microsoft.com, windows.net, *.paloaltonetworks.com

Re: Multple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"

kiwi — Thu, 23 Jan 2025 15:29:04 GMT

Hi @pavel.sharypov ,

Not sure where it says not to use a space.

Both the screenshot and the text example on the DOC show a space after the comma.

In your example I'd go with "microsoft.com, windows.net, *.paloaltonetworks.com"

Kind regards,

-Kim.

Re: Multple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"

pavel.sharypov — Sat, 22 Feb 2025 19:59:28 GMT

I contacted Palo Alto support, and the formatting should be as follows "microsoft.com,windows.net, *.paloaltonetworks.com". The space goes only before the wildcard *.