In the L3 firewall rules you do not need to have the wild card, ie "google.com" would also allow (or deny depending on the scenario) "mail.google.com".
Another thing of note is using "*" in content filtering. When used alone it will act as a wild card for all URLs, but if used in a URL (ie "*.google.com") it will act as an asterisk character and NOT a wildcard.