Would this be a good workaround?
Creating multiple URL objects for granular control over FQDNs in Cisco FMC involves defining individual objects for each specific subdomain you want to manage access to. Here's a step-by-step guide:
1. Accessing the FMC User Interface:
Log in to the Cisco FMC web interface using your administrator credentials.
2. Navigating to URL Objects:
Go to Objects > Security > URL Objects.
3. Creating a New URL Object:
Click the Add button.
In the Name field, enter a descriptive name for the URL object (e.g., "allow_[invalid URL removed]").
In the Value field, enter the complete subdomain URL using the following format: https://*.subdomain1.example.com. The asterisk (*) serves as a wildcard, matching any character within the subdomain portion.
4. Repeating for Additional Subdomains:
Follow steps 3-4 to create individual URL objects for each subdomain you want to control. Remember to use unique names and the appropriate subdomain URL structure in each object.
5. Utilizing URL Objects in Policies:
Once you've created the necessary URL objects, navigate to Policies > Access Policies.
Edit the relevant policy or create a new one to manage access rules.
In the policy rule, under the Source URL section, select the "Match Any" operator.
Click the Add button and choose URL Object.
Select the appropriate URL object you created for the specific subdomain you want to allow or deny access to.
6. Saving and Deploying the Policy:
Review your policy configuration to ensure accuracy.
Click Save to apply the changes.
Deploy the policy to the affected devices or network segments.
Important Notes:
Remember that using wildcards like "*" in URL objects only matches characters within the subdomain, not the main domain name.
Exercise caution when using this approach, as it can unintentionally allow access to unexpected subdomains if not configured carefully.
For more complex scenarios or advanced configurations, consult the official Cisco documentation or seek expert guidance.
By following these steps and considering the potential implications, you can effectively create multiple URL objects to achieve granular control over specific subdomains within your Cisco FMC environment.
