How to create an object containing something like this *.yahoo.com

[cleegt]

Hi All,

I need to set up a firewall policy such that it only allows the users to go to the following websites , eg. *.yahoo.com (ie. login.yahoo.com, mail.yahoo.com, etc.) I know that I can create fixed ip object. But for this situation (*.yahoo.com), does checkpoint provide some way to handle it? Is this possible?

Any suggestions are welcome.

Thanks,

-- Chris

[dsb.nepo]

the URI resource object can do that.

SmartDashboard ->[Manage]->[resources] ->[new-URI]

[mcnallym]

You can create a Domain object. Under Network Objects

New/Others/Domain

[MarioL]

As said before you can create URI resources, if you are going to use http traffic, or you can create domain objects.

In both cases the objects depend on DNS resolution, so bear that in mind.

For URI it will be something like "*.yahoo.com" for a Domain object it will be something like ".yahoo.com".

[cleegt]

Hi All,

Thanks a lot for the responses. It is very useful information to me :)

Best Regards,

-- Chris