Forum Discussion

Nimbostratus

Aug 04, 2015

Is it possible that can set rules as FQDN?

I'm searching for firewall which can set outbound-rules as FQDN. If ANF can, I'd like to try it!! I really appreciate if you cooperate with me... thanks.

advanced firewall manager

deployment

design

M_Quevedo

Nimbostratus

Dec 10, 2015

From TMOS version 12.0 forward you can use FQDN's in AFM network firewall rules!

See the v12.0 BIG-IP AFM release notes: https://support.f5.com/kb/en-us/products/big-ip-afm/releasenotes/product/relnote-afm-12-0-0.html

See the v12.0 BIG-IP AFM manual: https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-12-0-0/4.html

Ed_Summers
Nimbostratus
Dec 10, 2015
Interesting! My caution to the original poster would be to verify functionality of this AFM capability versus your particular deployment. Have run into issues on some platforms when using FQDN/FQHN in policies especially for those having a low TTL in their DNS record. Recommend reviewing how large your ruleset will be including how many entries will have a FQDN and speak with your SE on how AFM will perform given these conditions.