Wildcards in the Allow/Block lists

UniqueIdentity
Comes here often

Wildcards in the Allow/Block lists

We would like to create an explicit allow group policy which only permits traffic to predetermined sites/workflows. To do this we would like to use * character in the blocked URL list and then populate the explicitly named sites in the Allowed URL list.

 

The challenge with this approach is that we would like to allow specific Microsoft applications. On the Microsoft site: https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worl... it lists the names of the domains that should included in the allow list but, in many of their domains they use the * to indicate a wildcard, such as *.outlook.com, however in the Meraki rules it says that when using a * character in a block/allow list it denotes the actual * character and not a wildcard.

 

How can we add sites that Microsoft only defines by using a wildcard to the allow list?

1 Reply 1
GIdenJoe
Kind of a big deal
Kind of a big deal

You're supposed to leave off the parts that are any.  I do believe there are limitations to this.
A star can only be used to match anything in itself.

So in your case you should match on outlook.com not *.outlook.com
You can even have a / in your matching criterium something.com/something

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels