topic On which appliance, you are in Network Security

Objects with FQDN

WebOps eDreams — Tue, 12 Mar 2019 12:39:02 GMT

Hi!

is it possible to create an object with fqdn instead of ips?

thanks

Hi,

ankojha — Mon, 18 Jan 2016 16:33:55 GMT

Hi,

Yes, you can add FQDN under Object management ->URL.

Hope it helps.

Thanks,

Ankita

On which appliance, you are

Sunil Kumar — Tue, 19 Jan 2016 05:31:24 GMT

On which appliance, you are asking to configure the FQDN.

If this is ASA, yes you can do it. Please have a look on this article

https://supportforums.cisco.com/document/66011/using-hostnames-dns-access-lists-configuration-steps-caveats-and-troubleshooting

Firepower/Sourcefire supports FQDN for URL filtering purpose. You can also configure FQDN in Security Intelligence's blacklisting as to block the IP address based upon domains but port based filtering with FQDN is not possible.

Hi Sunil!

WebOps eDreams — Tue, 19 Jan 2016 09:21:03 GMT

Hi Sunil!

Actually thats what i was trying to do fqdn with port based filtering or application detection.

Basically we have several server/resources in our internal networks which we access by using fqdn (using internal dns) and the idea is to create acls but with diferent ports than 80 /443.

We found no way to accomplish this; only by using static ips but this is not a 'nice' way to do it.

Re: Hi,

johannes88 — Wed, 18 Oct 2017 09:18:31 GMT

But this means you need a URL License on your firepower system. Before (on ASA) there existed FQDN objects without any URL Lic. Is this correct?

r Johannes