Troubleshooting Tip: Why Wildcard FQDN or Wildcard FQDN Group Objects Cannot be Used in Policies in FortiManager

Example Scenario:

The following firewall objects are created within FortiManager, an Address object, a Wildcard FQDN object, and a Wildcard FQDN Group object.

When configuring policies in the Policy Package within FortiManager, notice that for the Source and Destination field, the Address object can be configured, but not the Wildcard FQDN or Wildcard FQDN Group objects.

This is because Wildcard FQDN objects are only used for SSL/SSH Inspection Security Profile as shown below.

To configure policies with wildcard FQDN, an address object must be created with the Category set as Address, and the Type set to FQDN. An example of a wildcard FQDN object that can be used in policies is shown below.