Security Policy with RegEx?

Julia_L — Thu, 16 Jan 2025 10:26:22 GMT

Hello CheckMates,

I want to create a firewall rule to grant access to a number of subdomains, but I don't want to open the whole domain, as well as I don't want to create a high number of objects for each subdomain. So I thought I could realise it by using RegEx, but I heard that RegEx is only possible on the Application layer, and you can't specify the needed services there.

This is what I need (anonymised):
sub01.tld.com
sub02.tld.com
sub03.tld.com
sub04.tld.com
sub05.tld.com
(you get the point, it continues up to)
sub09.tld.com
The needed services are port 8080 and 10000

My idea was a RegEx like ^sub(0[1-9]).tld.com$ - but is that possible?

Regards,
Julia

Re: Security Policy with RegEx?

PhoneBoy — Thu, 16 Jan 2025 15:41:58 GMT

Correct, the only way to use Regex is to use Custom Application/Site objects which implies web traffic.
For non-web traffic, you have to specify the various FQDNs either as FQDN domain objects or put them in a Network Feed which can be represented with a single object.

topic Re: Security Policy with RegEx? in Firewall and Security Management

Security Policy with RegEx?

Re: Security Policy with RegEx?