We have an issue where we allow list a domain using a dynamic IP, but the host calling the domain and the firewall resolve to different addresses and the connection is drops (in most cases).
We have looked at URL categories but seem to face the same issue.
Can anyone suggest a solution?
If you use a custom URL category to allow access to the domain and configure the entries properly you don't have to restrict the destination address. If you can give us a bit more information on how you have configured the security policy allowing access to the URL category we can help you get it configured correctly.
The following questions are only relevant if you are attempting to do this through an FQDN object. Again, if you are doing this with a URL category I wouldn't bother limiting it to destination addresses.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!