08-07-2018 02:28 AM
Hi @clonesheep
FQDN objects for services from Google could be problematic anyway as the IP behind the FQDN could change fast and then the firewall does not allow the traffic until the FQDN object os refreshed.
In your case you could use a custom URL category to allow exactly this URL (this requires TLS decryption to work as the firewall only sees www.google.com without decrypting the traffic)