URL Filtering RegEx allow all but disable one

[dsitech-rz]

Hi

I used the "Overried Categorization" on this regex ".windowsupdate\.com" to classify all "Windows Update" in "Software Update" and give specifics rights for my users / servers.

I tried to modify my regex to match *.windowsupdate.com but not http://ctldl.windowsupdate.com.

I search in the forum but not found this particular synthax.

I tried on https://regex101.com/ the "negative lookbehind" pattern :

(?<!http\:\/\/cdtl\.windowsupdate\.com)([a-zA-Z0-9\.]+)(\.windowsupdate\.com)

(?!.*cdtl*\.windowsupdate\.com)([a-zA-Z0-9\.]+)(\.windowsupdate\.com)

(?<!.cdtl\.windowsupdate\.com).windowsupdate\.com

but I have an issue when I push policy (GAIA R81.10, JHF 130)

Do Checkpoint regex allow "negative lookbehind" ?

Thank you for your indulgence for my first post

Xavier