topic FQDN Object *.google.com in ASA in Network Security

FQDN Object *.google.com in ASA

francoisverges — Tue, 12 Mar 2019 01:54:45 GMT

Hey everyone,

I know it is possible to define a FQDN objects in an ASA as shown in this document : https://supportforums.cisco.com/docs/DOC-17014

My question is, would it be possible to create a FQDN object using the "*" to desine everything (Ex: *.google.com to desine all the sub google URL) ?

In other words, would it be possible to do the following :

object network google.com

fqdn *.google.com

I doubt it is possible but I just want to have a confirmation from you guys.

Thank you for your help.

François

FQDN Object *.google.com in ASA

Julio Carvajal — Fri, 07 Jun 2013 22:16:35 GMT

Hello Francois,

Hmm, does not look right, the FQDN is not a regex interpreter so I would say it will not do it,

Regards,

Julio

FQDN Object *.google.com in ASA

francoisverges — Mon, 10 Jun 2013 13:17:02 GMT

Thank you for your reply.

I did some testing and I confirm that it is not possible :

asa(config)# object network google.com

asa(config-network-object)# fqd

asa(config-network-object)# fqdn *.google.com

ERROR: Invalid FQDN. FQDN must begin and end with a digit/letter. Only letters, digits, and hyphen are allowed as internal characters. Labels are separated by a dot.

Re: FQDN Object *.google.com in ASA

koolasice — Thu, 27 Dec 2018 14:57:16 GMT

This should work like this ...

object network google.com.FQDN

fqdn google.com

object-group network google.com.URL

network-object object google.com.FQDN