How Do I Check if a URL Domain Name is Part of an Existing Updateable Object?

[Martin_S_1]

We have the following Domain names that need to be allowed outbound HTTPS access for some of our internal servers:

• *.prod.do.dsp.mp.microsoft.com
• emdl.ws.microsoft.com
• *.dl.delivery.mp.microsoft.com
• *.windowsupdate.com
• *.delivery.mp.microsoft.com
• *.update.microsoft.com
• adl.windows.com

How do I check if these URL Domain Names are already part of an existing Updateable Object which I can use for my firewall rules?

I have used domains_tool and found some of these linked to one particular Updateable Object. Just by chance. I am not sure how to narrow down which Updateable Object the other URLs might be linked to. 

[the_rock · Accepted solution]

Maybe below link can help?

Best,

Andy

https://community.checkpoint.com/t5/Management/R80-20-Updatable-Domain-Objects-and-CLI-Commands/td-p...

[Martin_S_1]

Thank you very much. I have worked out that some of these are not actually currently referenced by any existing Updateable Object at this moment in time. 

[the_rock]

Glad we can help mate. I always found below flag is the best

domains_tool -uo "updatable_object_name"

Best,

Andy