Advice Request Which firewall can accept FQDN's in its rules?

Share practical recommendations that address the author's needs.
Hi,

Does anyone know of any firewall which can accept fully qualified domain names in it's rules?
WIndows Defender Firewall via Intune MDM


It is easier to block a website in the hosts file: define FQDN in disallowed section and direct to 0.0.0.0

 
Last edited by a moderator:
I should explain. I want to only allow Windows Update to go to a finite list of URLs.

Is that the intune that comes with Office 365 ? Or is it some other MS thing?
 
Last edited:
I should explain. I want to only allow Windows Update to go to a finite list of URLs.
The FQDN still has to be mapped to an IP address. You can't make firewall rules that just point to "www.FQDN" without IP address mapping. Packets are routed by IP addresses.

The Microsoft Endpoint Manager permits the admin to enter a FQDN into the rules and then through a service it auto-resolves the IP addresses for the admin - so they don't have to figure out the IP addresses manually. Also, there are dependencies for FQDNs in firewall rules to work.

In short, the DNS resolution is being done by MEM as a "convenience" for the admin.

You could put pfsense onto a router and use FQDNs, but you still have to map those FQDNs to IP addresses manually in pfsense.

Is that the intune that comes with Office 365 ? Or is it some other MS thing?
Microsoft Endpoint Manager.
 
Yes, there are several firewalls that can accept Fully Qualified Domain Names (FQDNs) in their rules:

1. Palo Alto Networks Firewall: This firewall allows you to use FQDNs in security policy rules. You can create a security policy rule with an FQDN as the source or destination in the rule.

2. Cisco ASA Firewall: This firewall can also accept FQDNs in its rules. The firewall supports DNS resolution to map FQDNs to IP addresses, allowing you to create a security policy rule with an FQDN as the source or destination in the rule.

3. Fortinet Firewall: The Fortinet firewall supports FQDNs in its rules. You can use FQDNs in firewall policies, virtual IPs, and routing policies.

4. Check Point Firewall: Check Point firewalls also support FQDNs in their rules. You can create an object for an FQDN, and use it as a source or destination in a security rule.

These firewalls provide the ability to use FQDNs in security policy rules, which can be helpful in managing security policies and making configuration changes easier.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top