Skip to main content
GohanC
GohanC
Explorer III
July 7, 2023
Solved

FQDN and Wildcard in the same Policy

  • July 7, 2023
  • 6 replies
  • 3174 views

Hello everyone!

Is that possible to use a FQDN Wildcard group and a FQDN Group in the same policy as destination? Or each policy needs to have just one of that types?

Best answer by akushwaha

Hi Gui,

 

I understand you want to use one FQDN Address Group with another Wildcard FQDN Group as Destination address in same Firewall Policy. Yeah you can do it.

Please refer to this article for FQDN as destination address: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/707266/fqdn-addresses

To use Wildcard FQDN please refer to this article :
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-wildcard-FQDN/ta-p/196118


Regards,
Abhimanyu

6 replies

abarushka
Staff
abarushka
Staff
July 7, 2023

Hello Gui,

 

Can you please elaborate what you are referring to by "FQDN Wildcard group"?

 

You may consider to configure a list of wildcard FQDNs and add them to the address group and use address group in the firewall policy.

 

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/217973/using-wildcard-fqdn-addresses-in-firewall-policies

    GohanC
    GohanCAuthor
    Explorer III
    July 7, 2023

    Hello @abarushka

    Of course. I mean a group with some wildcard addresses (URL).

    I need to know if it is possible to apply wildcard and simple fqdn address group in the same policy as destination.

    abarushka
    Staff
    abarushka
    Staff
    July 9, 2023

    Hello Gui,

     

    I am not aware about such limitation. It also works for me in the lab.

      sw2090
      SuperUser
      sw2090
      SuperUser
      July 7, 2023

      hm I tried to use wildcard fqdn recently but I couldn't even select them as destination in a policy hence they didn't appear there at all...

        akushwaha
        Staff
        akushwahaAnswer
        Staff
        July 11, 2023

        Hi Gui,

         

        I understand you want to use one FQDN Address Group with another Wildcard FQDN Group as Destination address in same Firewall Policy. Yeah you can do it.

        Please refer to this article for FQDN as destination address: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/707266/fqdn-addresses

        To use Wildcard FQDN please refer to this article :
        https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-wildcard-FQDN/ta-p/196118


        Regards,
        Abhimanyu

        GohanC
        GohanCAuthor
        Explorer III
        July 11, 2023

        Thanks for your reply, Abhimanyu!

        Terms & ConditionsAccessibility statement
        Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
        Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.