<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic URL Filtering RegEx allow all but disable one in Firewall and Security Management</title>
    <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-RegEx-allow-all-but-disable-one/m-p/210462#M39870</link>
    <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;I used the "Overried Categorization" on this regex ".windowsupdate\.com" to classify all "Windows Update" in "Software Update" and give specifics rights for my users / servers.&lt;/P&gt;&lt;P&gt;I tried to modify my regex to match *.windowsupdate.com but not http://&lt;STRONG&gt;ctldl&lt;/STRONG&gt;.windowsupdate.com.&lt;/P&gt;&lt;P&gt;I search in the forum but not found this particular synthax.&lt;/P&gt;&lt;P&gt;I tried on &lt;A href="https://regex101.com/" target="_blank"&gt;https://regex101.com/&lt;/A&gt; the "negative lookbehind" pattern :&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="2"&gt;(?&amp;lt;!http\:\/\/cdtl\.windowsupdate\.com)([a-zA-Z0-9\.]+)(\.windowsupdate\.com)&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="2"&gt;(?!.*cdtl*\.windowsupdate\.com)([a-zA-Z0-9\.]+)(\.windowsupdate\.com)&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="2"&gt;(?&amp;lt;!.cdtl\.windowsupdate\.com).windowsupdate\.com&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;but I have an issue when I push policy (GAIA R81.10, JHF 130)&lt;/P&gt;&lt;P&gt;Do Checkpoint regex allow "negative lookbehind" ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you for your indulgence for my first post&lt;/P&gt;&lt;P&gt;Xavier&lt;/P&gt;</description>
    <pubDate>Thu, 04 Apr 2024 14:51:26 GMT</pubDate>
    <dc:creator>dsitech-rz</dc:creator>
    <dc:date>2024-04-04T14:51:26Z</dc:date>
    <item>
      <title>URL Filtering RegEx allow all but disable one</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-RegEx-allow-all-but-disable-one/m-p/210462#M39870</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;I used the "Overried Categorization" on this regex ".windowsupdate\.com" to classify all "Windows Update" in "Software Update" and give specifics rights for my users / servers.&lt;/P&gt;&lt;P&gt;I tried to modify my regex to match *.windowsupdate.com but not http://&lt;STRONG&gt;ctldl&lt;/STRONG&gt;.windowsupdate.com.&lt;/P&gt;&lt;P&gt;I search in the forum but not found this particular synthax.&lt;/P&gt;&lt;P&gt;I tried on &lt;A href="https://regex101.com/" target="_blank"&gt;https://regex101.com/&lt;/A&gt; the "negative lookbehind" pattern :&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="2"&gt;(?&amp;lt;!http\:\/\/cdtl\.windowsupdate\.com)([a-zA-Z0-9\.]+)(\.windowsupdate\.com)&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="2"&gt;(?!.*cdtl*\.windowsupdate\.com)([a-zA-Z0-9\.]+)(\.windowsupdate\.com)&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="2"&gt;(?&amp;lt;!.cdtl\.windowsupdate\.com).windowsupdate\.com&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;but I have an issue when I push policy (GAIA R81.10, JHF 130)&lt;/P&gt;&lt;P&gt;Do Checkpoint regex allow "negative lookbehind" ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you for your indulgence for my first post&lt;/P&gt;&lt;P&gt;Xavier&lt;/P&gt;</description>
      <pubDate>Thu, 04 Apr 2024 14:51:26 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/URL-Filtering-RegEx-allow-all-but-disable-one/m-p/210462#M39870</guid>
      <dc:creator>dsitech-rz</dc:creator>
      <dc:date>2024-04-04T14:51:26Z</dc:date>
    </item>
  </channel>
</rss>

