https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-add-dynamic-URLs-or-FQDNs-to-security-rules/m-p/222524#M42646 <P>For the option you tried to work, you must have Passive DNS Learning set up correctly.<BR />This requires the gateway to see the DNS requests from the client to a trusted DNS server.<BR />See:&nbsp;<A href="https://support.checkpoint.com/results/sk/sk161612" target="_blank">https://support.checkpoint.com/results/sk/sk161612</A>&nbsp;</P> <P>Custom Application/Site Objects are another option.</P> Thu, 01 Aug 2024 20:19:23 GMT PhoneBoy 2024-08-01T20:19:23Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-add-dynamic-URLs-or-FQDNs-to-security-rules/m-p/222523#M42645 <P>What is the correct way to add these URLs or FQDNs when they are dynamic, for example ec2-52-23-100-129.compute-1.amazonaws.com I usually add .*.compute-1.amazonaws.com, but not always respect the wildcard.<BR /><BR /><BR />I attach an image of how the object was created.</P><P>&nbsp;</P><P>Thanks all</P> Thu, 01 Aug 2024 19:41:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-add-dynamic-URLs-or-FQDNs-to-security-rules/m-p/222523#M42645 DanielJavier 2024-08-01T19:41:23Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-add-dynamic-URLs-or-FQDNs-to-security-rules/m-p/222524#M42646 <P>For the option you tried to work, you must have Passive DNS Learning set up correctly.<BR />This requires the gateway to see the DNS requests from the client to a trusted DNS server.<BR />See:&nbsp;<A href="https://support.checkpoint.com/results/sk/sk161612" target="_blank">https://support.checkpoint.com/results/sk/sk161612</A>&nbsp;</P> <P>Custom Application/Site Objects are another option.</P> Thu, 01 Aug 2024 20:19:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-add-dynamic-URLs-or-FQDNs-to-security-rules/m-p/222524#M42646 PhoneBoy 2024-08-01T20:19:23Z