Support FQDN wildcard for both root domain and subdomains on USG FLEX H

Options
Zyxel_Tina
Zyxel_Tina Posts: 637 image  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments
in Security Ideas

Currently on uOS, the FQDN object only supports the format *.domain.com, which matches subdomains (e.g., www.domain.com, mail.domain.com) but does not include the root domain (domain.com).

In ZLD systems, the format *domain.com was supported, allowing both the root domain and subdomains to be covered by a single entry.

User @PeterUK would like to request an enhancement to bring this behavior to uOS, so that a single wildcard can cover both the root domain and its subdomains.

This suggestion originated from the post found here: FQDN problem www.grc.com vs grc.com under wildcard — Zyxel Community

If anyone likes this idea, please show your support by leaving a comment or voting for it.

Zyxel Tina

4
Up Down
4 votes

Active · Last Updated

Comments

  • Zulgrib
    Zulgrib Posts: 48 image  Freshman Member
    First Answer First Comment Friend Collector Fifth Anniversary

    Not sure it is complicated to create an FQDN object group and have the subdomain wildcard + root domain in the group.

  • PeterUK
    PeterUK Posts: 4,405 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited January 24
    https://community.zyxel.com/en/discussion/comment/82424#Comment_82424

    Hi Zulgrib

    The problem is if you have many FQDN like I do one problem is you don't know if you need both subdomain wildcard + root domain the other problem is there is a limited number of address objects you can make meaning if you have to do subdomain wildcard + root domain this take up two objects and not one.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）