topic Re: fqdn - policies - wildcard in General Topics

fqdn - policies - wildcard

axel5le — Tue, 14 Aug 2012 14:01:24 GMT

Hi,

i want to place a policy with fqdn entrys completed with wildcards.

e.g.

Our PCs have names like this:

LABPC01, LABPC02, LABPC03

Now i want to deny the internet traffic for every PC with the name LABPC*

But i also want to allow it to a special list of pcs.

I wanted to use a policy with fqdn entrys - but i'm not allowed.

When i want to do an address object, an error occurs: The value does not fit the validation

Can someone please help me out?

Thank you!

axel

Re: fqdn - policies - wildcard

mikand — Mon, 20 Aug 2012 23:04:26 GMT

The FQDN in an address object (instead of IP address) will be resolved into an ip address during commit (and then refreshed every 20 minutes or so).

I would recommend you to avoid using FQDN in your address objects and instead redesign your network so your lab-pc's is on the same (or a few) /24 networks (or how large you need) and then set the security policy based on iprange. Perhaps in combination with userid (either through pan-agent or by captive portal).