Blocking source URL or hostname in Application Control&URL Filtering.

[Serhii_Yaholnyt]

HI.
We have some servers which will initiate connections from internet to our internal network. We use Inbound HTTPS Inspection to inspect this traffic. Is it possible to make only certain hosts from internet able to connect to internal network but not using IP address(because those hosts have dynamic IP)?

P.S. Using R77.30.

[PhoneBoy]

Is it the source or destination IP that is dynamic here?

How would you determine whether the host is valid? DNS names?

Making the actual example more concrete would help.

[Serhii_Yaholnyt]

HI. Source IP is dynamic and I guess, using DNS names is the only way to make it if it is possible at all.

[PhoneBoy · Accepted solution]

This thread summarizes the options, which are:

• Upgrade to R80.10 and use FQDN Domain Objects
• Use Dynamic Objects plus a script to update its contents based on DNS names