Skip to main content
NetJO
New Member
July 11, 2017
Question

Wildcard FQDN objects

  • July 11, 2017
  • 1 reply
  • 21748 views

GoodMorning.

I'm trying to build a filter to allow access to MIcrosoft Office365 online services (Mail, above all) for a not-internet-allowed network.

The users on this network have to be able to use Office365 only.

 

The Microsoft documentation is a pain.

There are lots of IPs and, if you want to use FQDNs, they require the use of wildcard such as *.office365.com

I can create wildcard fqdn object, but I canont use them in a policy.

 

Is there a way to use wildcard FQDN objects with fortigate?

Is there an alternative way to build such a filter?

version v5.4.5,build1138 (GA)

 

Many thanks for your kind help

 

 

    1 reply

    EMES
    New Member
    July 11, 2017
    Your better off creating a one off Web filtering profile that's blocks all categories and then use the static filter to allow office365. You can then add an application senor to lock it down even further.
    acuity
    New Member
    July 11, 2017

    Hello NetJo,

     

    there is a KB-article regarding this topic: http://kb.fortinet.com/kb/documentLink.do?externalID=FD35297

    The suggested solution is to use the webfilter feature as mentioned before.