Domain in Network Feed

[DR_74]

Hello,

A quick question with Domains in Network Feed:

I see we can add domains in the Network Feed object list. Can you confirm?:

- *.domain.com => will match everything ending by .domain.com

- domain.com => will only match www.domain.com and domain.com, but not test.domain.com

Thank you

[simonemantovani]

Yes, as reported also in admin guide: https://sc1.checkpoint.com/documents/Sales_tools/DemoPoint/Quantum_R81.20/Topics/Network_Feed_Object...

[the_rock]

That sounds right.

[PhoneBoy]

Correct.
It's important to note that for this to work, the client DNS requests must pass through the gateway AND the gateway should be using the same resolver as the clients to ensure the same IPs are returned by both.
While this talks about Domain Objects, it also applies for domains listed in Network Objects: https://support.checkpoint.com/results/sk/sk161612