Multple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"

[pavel.sharypov]

Hi everyone, 

Could you please help me to figure out what is the right format I should use to add multiple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"? 

In the following support doc, I can see that I must put space before the wildcard character.

Enforce GlobalProtect Connections with FQDN Exclusions

Additionally, to separate multiple domain names I need to use only commas without space, but when I check attached screenshots, it clearly shows a space after commas. I am getting confused... 

What would be the right formatting if I need to allow the following fqdns: microsoft.com, windows.net, *.paloaltonetworks.com

[kiwi]

Hi @pavel.sharypov ,

Not sure where it says not to use a space.

Both the screenshot and the text example on the DOC show a space after the comma.

In your example I'd go with "microsoft.com, windows.net, *.paloaltonetworks.com" 

Kind regards,

-Kim.

[pavel.sharypov · Accepted solution]

I contacted Palo Alto support, and the formatting should be as follows "microsoft.com,windows.net, *.paloaltonetworks.com". The space goes only before the wildcard *.