FQDN and Wildcard in the same Policy

[gcarvalho]

Hello everyone!

Is that possible to use a FQDN Wildcard group and a FQDN Group in the same policy as destination? Or each policy needs to have just one of that types?

[abarushka · Accepted solution]

Hello Gui,

Can you please elaborate what you are referring to by "FQDN Wildcard group"?

You may consider to configure a list of wildcard FQDNs and add them to the address group and use address group in the firewall policy.

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/217973/using-wildcard-fqdn-addresses-in...

[abarushka · Accepted solution]

Hello Gui,

Can you please elaborate what you are referring to by "FQDN Wildcard group"?

You may consider to configure a list of wildcard FQDNs and add them to the address group and use address group in the firewall policy.

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/217973/using-wildcard-fqdn-addresses-in...

[gcarvalho]

Hello @abarushka

Of course. I mean a group with some wildcard addresses (URL).

I need to know if it is possible to apply wildcard and simple fqdn address group in the same policy as destination.

[abarushka]

Hello Gui,

I am not aware about such limitation. It also works for me in the lab.

[sw2090]

hm I tried to use wildcard fqdn recently but I couldn't even select them as destination in a policy hence they didn't appear there at all...

[akushwaha · Accepted solution]

Hi Gui,

I understand you want to use one FQDN Address Group with another Wildcard FQDN Group as Destination address in same Firewall Policy. Yeah you can do it.

Please refer to this article for FQDN as destination address: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/707266/fqdn-addresses

To use Wildcard FQDN please refer to this article :
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-wildcard-FQDN/ta-p/196118

Regards,
Abhimanyu

[gcarvalho]

Thanks for your reply, Abhimanyu!