webroot connection for blocked clients

[Optimessprime]

Hello, we are using a Fortigate 80C with Firmware v5.2.4 build688(GA) and licensed Web FIltering and Application Control. I've got some trouble with our webroot antivir client. We have a bunch of IP adresses in our internal network, that are completly blocked through a policy in the fortigate, where every service is denied. Now are we planning to protect our clients with the antvir software "webroot secure anywhere". But for this we need to allow these blocked clients a connection  to severals url with wildcards for example *.p4.webrootcloudav.com *.compute.amazonaws.com I've tried some different ways but with no success. FQDN dont support wildcards. Another policy that allows the URLs in the web filter, above the policy which deny the whole connection doesnt show any effect. I would be glad to hear from you. kind regards