972
Views
5
Helpful
1
Replies
CSCuv93558 - Object Creation using FQDN
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2018 12:47 AM - edited 03-20-2019 10:13 PM
Is there any timeline for the enhancement.
FQDN Objects are very useful so i expect that it should be available for us ASAP.
Labels:
- Labels:
-
Cisco Bugs
1 Reply 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-15-2019 12:14 PM
Setting up a host object doesn't work if a hostname can map to multiple IP addresses because of a load balancer, etc. I use a workaround where if a hostname can resolve to a limited number of known IP addresses, first make a network object for each IP, with a slightly different name. Assume www.foo.com can resolve to 2 different IP addresses . Make host objects:
foo.com_dest1 11.12.13.14
foo.com_dest2 15.16.17.18
then make a group object
foo_group
that contains the host objects
foo.com_dest1
foo.com_dest2
and set the group object up in the NAT. This workaround does have limitations, it works best when only a small number of known static name resolutions is used. If it is a large number, or very dynamic, or any are unknown, it will be difficult and not work well.
foo.com_dest1 11.12.13.14
foo.com_dest2 15.16.17.18
then make a group object
foo_group
that contains the host objects
foo.com_dest1
foo.com_dest2
and set the group object up in the NAT. This workaround does have limitations, it works best when only a small number of known static name resolutions is used. If it is a large number, or very dynamic, or any are unknown, it will be difficult and not work well.
