Hello,
I do not manage anyconnect in our environment but was trying to get some clarity on how the dynamic exclude works since wildcards cannot be used. In the documentation it says to use the domain. The example they gave is pretty simple, *cisco.com
is just cisco.com. Thats nice but I am wanting exclude Microsoft domains for updates, they have 8 billion subdomains, and I don't want to just exclude Microsoft.com that is way too much. So, my question is does it have to be just the base domain that is excluded, or can I just have the subdomain excluded and anything containing that? Example: *.update.microsoft.com can exclude update.microsoft.com or does it have to be microsoft.com? Same with *.dl.delivery.mp.microsoft.com. Can just dl.delivery.mp.microsoft.com be excluded so anything from that subdomain is excluded or does it have to be microsoft.com?
