How to Whitelist Websites

[bgp179]

Hello all,

I am trying to figure out the best way to whitelist websites.  We have too many (10+) different web filter profiles and as many AppControl profiles that adding URL's to these would be too cumbersome (even from a Fortimanager).  

I want to create a new policy above all of these policies with the webfilters and have a destination group of nothing but FQDN's that don't have any web filter profiles.  The problem is that I've read that using FQDN's is a bad idea.

I've tested whitelisting www.facebook.com because our webfilters AND AC block it.  This works by adding the FQDN www.facebook.com to a policy without any webfilters/AC, however many of the images/links are blocked.

Any other suggestions?

Thanks.