topic FQDN Addresses in General Topics

FQDN Addresses

rockfort — Wed, 15 Jul 2020 17:17:50 GMT

I need your help on this please.

Is it possible to have a wildcard FQDN as a source or destination address (example *.microsoft.com)

Is is possible to mix wildcard FQDN with a non wildcard FQDN in an address group (example add in *.microsoft.com with google.com in the same address group)

Thanks in advance.

Re: FQDN Addresses

MP18 — Wed, 15 Jul 2020 20:42:34 GMT

@rockfort

As per my knowledge you cannot have FQDN with wilcard mask.

But you can have wildcard destination or source address

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/networking-features/wildcard-address

Also you can have FQDN wildcard url.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluFCAS

Regards

Re: FQDN Addresses

SutareMayur — Thu, 16 Jul 2020 04:13:36 GMT

@rockfort ,

You can't add Wildcard entry like *.microsoft.com under FQDN type address object as it should be fully qualified.

If you want to allow/deny any specific wildcard domain under security policy, you can configure custom url category.

Under custom url category, you can add single or multiple wildcard domains. And this URL category can be called under security policy directly under Service/URL category tab. Or also can be configured using URL filtering profile by taking required actions against custom url category that you have created under URL filtering profile.

Hope it helps!

Mayur