Domain objects are used
when creating policies or HTTPS inspection rules.
-
You can add multiple domain objects at the same time by using a delimiter between each domain entry.
-
Valid delimiters are semicolon (;), comma (,), or linefeed (\r, \n, or \n).
Procedure
- Go to .
- Click Add or click the item to
edit.The Add/Edit Domain Object screen opens.
- Specify a name that describes the domain object.
- Optionally, enter a description.
- Note that the Domain type is Domain and is the only available domain type.
- Specify one or more domains to add (using supported delimiters when specifying
multiple domain entries).A match is found if the site domain for the traffic matches the input domain name.
Rules Examples -
If the input entry does not contain a wild card, Deep Discovery Web Inspector matches the entire domain only.
-
www.test.com
matches the domain sitewww.test.com
only.
-
The domain input string is case-insensitive.
-
www.test.com
andWWW.TEST.COM
are equivalent.
-
Traffic matches are protocol sensitive if the input record contains the protocol.If the input entry does not contain the protocol, traffic matches include both HTTP and HTTPS traffic.
-
https://www.test.com
matches the domain sitehttps://www.test.com
but nothttp://www.test.com
. -
www.test.com
matches bothhttps://www.test.com
andhttp://www.test.com
.
-
Wild cards can be used to do prefix, intermediate, or suffix position matches.The asterisk (*) and question mark (?) are supported wild cards. The
?
only matches one string. The “*” matches any length string.
-
*www.test.com
matches any domain that ends withwww.test.com
. -
www.test.com*
matches any domain that starts withwww.test.com
. -
www.t*est.com
matches the domainwww.ttest.com
andwww.test.com
-
www.test.c?m
matcheswww.test.com
.
-
An IP address is a valid entry for a domain match.
-
192.168.2.1
matches only that single IP address.
-
- Click Add.
- Add additional domain entries as needed.
- Click Save.