How to make rule policy source-ip or destination-ip with naming URL

[jewfcb001]

Hi Everyone ,

I would like to know ASA firewall can make rule policy source-ip or destination-ip with naming URL or can define object group for URL 

example 

object network A
host test.local

access-list Test extended permit tcp host x.x.x.x  object-group A 

[balaji.bandi]

Look at the below exmaple (is this help you ?)

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/216553-understand-the-working-of-dns-on-asa-whe.html

[jewfcb001]

@balaji.bandi 

Hi balaji 

Thank you for information . I think the information will create object for FQDN but Can we create policy with FQDN or not and contain

source-ip or destination-ip ? 

Following example below. 

access-list Test extended permit tcp host x.x.x.x  test.local.com 

[balaji.bandi]

You can create a policy with FQDN (since the IP keep changing, that is the main goal here to use FQDN)

if the know fixed IP never change, then i will use IP address

it all depends on use case.

[jewfcb001]

@balaji.bandi 

Hi balaji 

Thank you for information. I have a small question about  how long cache ip store in ASA and how many maximum for configure dns ip and can we use proxy dns ? I cannot found the more information about  ASA when FQDN object

[balaji.bandi]

DNS depends on TTL, as long as it resolves the DNS i do not see any issue here.

I cannot found the more information about  ASA when FQDN object

what information you looking : check the below example : (is this what you looking or something else ?)

https://www.fir3net.com/Firewalls/Cisco/cisco-asa-domain-fqdn-based-acls.html

[jewfcb001]

@balaji.bandi 

I looking for the official document in Cisco.com

[balaji.bandi]

I looking for the official document in Cisco.com

the Orginal reply come from Cisco.com only ? not sure what you looking again.

Read the configuration guide the ASA Code you using.

[jewfcb001]

@balaji.bandi 

Thank you for answer . I will check with configuration guide on ASA again .