SRX Next-Gen Firewalls

Hi @asharp , If i dont have list of web site that dont need to block then i just made cust-permit-list only right? If the url not in the list is it will by default block? set security utm feature-profile web-filtering juniper-local profile localprofile1 ...

Hi @asharp , If i see url that u shared it's still need list of domain need to be put in the UTM custom-objects url-pattern. Or i miss understood it. Thanks and appreciate your feedback

Starting in Junos OS Release 15.1X49-D110, the " * " in a wildcard syntax, used for URL pattern Web filtering profile, matches all subdomains. For example, *.example.net matches: http://a.example.net http://example.net aaa.example.net ...

I know that Local Web Filtering doesn't require license, but I'm not familiar enough with it to tell if it can do the wildcard. ------------------------------ Nikolay Semov ------------------------------

In that case, I'm not sure what you mean ... The example I gave you is CLI, not SD. ------------------------------ Nikolay Semov ------------------------------

Hi Nikolay, Let's say i dont have web filtering license. Is there any alternative i can get the list of that "*"? Thanks

Hi Nikolay, Thanks for your feedback. But unfortunately not like that i want. I know we can make group policy using SD. But i just to know whether can possible do on CLI also. Thanks