10-19-2022 11:18 AM
Hello @SCalvanese,
I saw your post and have a few recommendations for you. You may want to look at it initially,
The maximum number of address objects you can resolve for an FQDN is increased from 10 of each address type (IPv4 and IPv6) to a maximum of 32 each. However, the combination of IPv4 and IPv6 addresses cannot exceed 512B; if it does, addresses that are not included in the first 512B are dropped and not resolved.
FQDN can also be helpful to control other services that don’t relate to web browsing like FTP, ssh, or any other service.
As a workaround, it is possible to configure the rule with App-id [google-base] or by using a custom URL {google.com}, instead of using FQDN Object
Thanks and Regards,
Edison K Benny
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/cloud-ngfw-discussions/bd-p/Cloud_NGFW_Discussions
*Don’t forget to accept the solution provided!
