Cisco
Login
Search

Profiles for Security and Gateway Security Profiles Fully Qualified Domain Name Filter Profile Create a Group FQDN Filter Profile

Last updated: Jul 03, 2025

Create a Group FQDN Filter Profile

Use the following procedure to create a group FQDN filter profile with at least two standalone profiles:

Procedure

1

In the Security Cloud Control platform menu, choose Products > Multicloud Defense .
2

Navigate to Policies > Profiles > FQDN Filtering.
3

Click Create.
4

Provide a unique Name.
5

(Optional) Enter a Description. This may help differentiate between profiles that may have a similar name.

6

Specify the Type as Group.
7

Select an initial standalone profile (at least one standalone profile is required).
8

Click Add FQDN Profile to create a new row for additional profiles.
9

Select a standalone profile.
10

Specify the policy Action for uncategorized FQDNs.
11

Specify the policy Action for ANY FQDNs (default).
12

(Optional) Specify the Decryption Exception for uncategorized or ANY if decryption is not desired or possible. Possible reasons for considering decryption exception include:

  • Desire to not inspect encrypted traffic (financial services, defense, health care, etc.).

  • SSO authentication traffic where decryption is not possible.

  • NTLM traffic that cannot be proxied.
13

Click Save.

What to do next

Attach the profile to a policy rule set. See Rule Sets and Rule Set Groups for more information.

Previous topic Create a Standalone FQDN Filter Profile Next topic Malicious IP Profile