Using wildcard pattern/ regex in URL filter

eissmann0 — Thu, 29 Oct 2015 07:52:06 GMT

Hello,

I like to exclude subdomains from decryption. Therefore I've created a URL category. But I don't like to exlude all subdomains only specific subdomains.

For example: I like to exlude domains starting with "whatsapp" and ending with "facebook.com". So the URL whatsapp-p3-bgp-01-iad3.facebook.com should be exluded from decrypten. But www.facebook.com not.

Therefore "*.facebook.com" wouldn't work. "whatsapp*.facebook.com" is not valid.

Can I use regular expression? Other solutions?

Kind Regards

Re: Using wildcard pattern/ regex in URL filter

BLH — Thu, 29 Oct 2015 14:18:37 GMT

Haven't tried applying it to such a scenario before, but you can use regex in address groups (and I guess could use that to block FQDN's ?)

https://live.paloaltonetworks.com/t5/Management-Articles/RegEx-Pattern-for-FQDN-Address-Object/ta-p/60257

Edit: Missed the part about decryption. Anyway, above, for what it's worth.

topic Using wildcard pattern/ regex in URL filter in General Topics

Using wildcard pattern/ regex in URL filter

Re: Using wildcard pattern/ regex in URL filter