Domain objects are used
when creating policies or HTTPS inspection rules.
-
You can add multiple domain objects at the same time by using a delimiter between each domain entry.
-
Valid delimiters are semicolon (;), comma (,), or linefeed (\r, \n, or \n).
Procedure
- Go to .
- Click Add or click the item to
edit.The Add/Edit Domain Object screen opens.
- Specify a name that describes the domain object.
- Optionally, enter a description.
- Note that the Domain type is Domain and is the only available domain type.
- Specify one or more domains to add (using supported delimiters when specifying
multiple domain entries).A match is found if the site domain for the traffic matches the input domain name.
Rules Examples -
If the input entry does not contain a wild card, Deep Discovery Web Inspector matches the entire domain only.
-
www.test.commatches the domain sitewww.test.com
only.
-
The domain input string is case-insensitive.
-
www.test.comandWWW.TEST.COMare equivalent.
-
Traffic matches are protocol sensitive if the input record contains the protocol.If the input entry does not contain the protocol, traffic matches include both HTTP and HTTPS traffic.
-
https://www.test.commatches the domain sitehttps://www.test.com
but nothttp://www.test.com
. -
www.test.commatches bothhttps://www.test.com
andhttp://www.test.com
.
-
Wild cards can be used to do prefix, intermediate, or suffix position matches.The asterisk (*) and question mark (?) are supported wild cards. The
?
only matches one string. The “*” matches any length string.
-
*www.test.commatches any domain that ends withwww.test.com
. -
www.test.com*matches any domain that starts withwww.test.com
. -
www.t*est.commatches the domainwww.ttest.com
andwww.test.com
-
www.test.c?mmatcheswww.test.com
.
-
An IP address is a valid entry for a domain match.
-
192.168.2.1matches only that single IP address.
-
- Click Add.
- Add additional domain entries as needed.
- Click Save.
