wildcard FQDN policy

Forum|Forum|9 years ago
April 7, 2017
5 replies
12640 views

Hello,

with FortiOS 5.2.9 is see wildcard FQDN address is not supported. What I need to do is create a policy which deny all except (for example) *.google.com. I could create a webfilter profile with a static wildcard url filter and then assign it to the ipv4 policy maybe ? but how can I deny all the other traffic ?

Thanks

hklb

Visitor III

Hi

With URL filter :

- *.google.com :exempt

- * : deny

Lucas

BabodaAuthor

New Member

Thanks Lucas,

that is also what I was thinking to do with a url filter deny * in web filter profile (other then exempted ones). Another question is if exempting google or lets suppose any other site, even malicious ones, does it means that those sites are totally exempted even though for example included in a not allowed category in the same web filter profile ?

hmtay_FTNT

Staff

Hello Baboda,

>>Another question is if exempting google or lets suppose any other site, even malicious ones, does it means that those sites are totally exempted even though for example included in a not allowed category in the same web filter profile ?

Yes, it will be exempted from the FortiGuard categories too.

HoMing