[c-nsp] FQDN ACL's on ASA

[Laurent Geyer]

FQDNs are not dynamic. The ASA will use whatever the name resolves to when the ACL is compiled.


Based on that behavior I'd say that, a wildcard entry wouldn't do what you want it to even if the ASA accepted that input.
—
Laurent

On Thu, Mar 28, 2013 at 6:14 PM, Scott Voll <svoll.voip at gmail.com> wrote:

> I know I can setup FQDN acls on my ASA, but is there a way to do wildcard
> Domain names?
> Example being *.microsoftonline.com
> We are looking to use office 365 and microsoft lists some FQDN and then
> they add a bunch of wildcard ones like above.
> If you can give me a link or example that would be great!
> TIA
> Scott
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/