Browse
Fortinet Community
Help
Sign In
Unlock Exclusive Benefits
Join Our Community Today!
Join our community and post in the forum to earn your exclusive
Holiday badge!
Become a member today!
LOGIN/REGISTER
CONTINUE AS A GUEST
Support Forum
Knowledge Base
Customer Service
Internal Article Nominations
FortiGate
FortiClient
FortiAP
FortiAnalyzer
FortiADC
FortiAuthenticator
FortiBridge
FortiCache
FortiCarrier
FortiCASB
FortiConnect
FortiConverter
FortiCNP
FortiDAST
FortiDDoS
FortiDB
FortiDNS
FortiDLP
FortiDeceptor
FortiDevSec
FortiDirector
FortiEDR
FortiExtender
FortiGate Cloud
FortiGuard
FortiHypervisor
FortiGuest
FortiInsight
FortiIsolator
FortiMail
FortiMonitor
FortiManager
FortiNAC
FortiNAC-F
FortiNDR (on-premise)
FortiNDRCloud
FortiPAM
FortiPhish
FortiPortal
FortiProxy
FortiRecon
FortiRecorder
FortiSRA
FortiSandbox
FortiScan
FortiSASE
FortiSIEM
FortiSOAR
FortiSwitch
FortiTester
FortiVoice
FortiToken
FortiWAN
FortiWeb
FortiAppSec Cloud
Lacework
RMA Information and Announcements
Wireless Controller
FortiCloud Products
ZTNA
4D Documents
Community Groups
Agora
Engage Services
The EPSP Platform
The ETSP Platform
Finland
FortiGate-VM on Azure
Discussions & Onboarding Information
Technical Learning
FortiGate-VM on AWS
Discussions & Onboarding Information
Technical Learning
FortiGate CNF (All Marketplaces)
Getting Started Resources
Technical Learning
FortiWeb Cloud (All Marketplaces)
Getting Started Resources
Technical Learning
Fortinet for SAP
Discussions
Technical Learning
Knowledge Base
Idea Exchange
Events
FortiSIEM
Discussions
Blog
FortiSOAR
Discussions
Announcements
Idea Exchange
KCS
Lacework
Super User
Blogs
jeff9870
New Contributor
08-02-2023
Last activity:
Aug 2, 2023 5:16:40 PM
20
Profile
20% Complete
User Statistics
0
Topics
1
Posts
0
Solutions
0
Kudos
View all badges
Most Liked Posts
Recent Solutions
No Content Available
My Draft
My Article Draft
Status:
All (4)
Draft (4)
Awaiting Review (0)
Awaiting Publication (0)
User Activity
Posts
Replies
No posts to display.
Re: Internal FQDN Wildcard for Proxy Filtering
07-28-2023
The key point here is that the DNS requests need to go through the FortiGate. It needs to learn the wildcard entries' IPs from the DNS traffic. If DNS goes through a different route, it won't be aware that 1.2.3.4 matches *.mywildcard.com.
