Can we use * inside FQDN Addresses as Firewall objects ?

[chrbar]

Hello,

We use FortiGate 3700D running FortiOS v5.2.3 build670 (GA), managed from FortiManager v5.2.2-build0706 150415.

We would like to allow some FQDN inside a firewall policy, with domains names and sub-domains names.

Can I use * in front of domain name and TLD (as *.domain.com) to allow all sub-domains names?

It seems not working!

Is it because our FortiOS v5.2.3 does not support it?

Do most recent versions support it?

Do you know how to allow all sub-domains names of a domain name?

Or, what the best practices to do that?

Regards, Chris

[EMES]

https://forum.fortinet.com/tm.aspx?m=118024#130434