FQDN Analysis allows administrators to gain insight into the type of websites accessed within the organization, and understand the reputation and risk of the accessed websites.
| Functionality |
Distributed Firewall |
Gateway Firewall |
| FQDN Analysis (formerly URL Analysis) |
NO |
YES (in 3.2)
- Supported only on tier-1 gateways.
- Uses DNS snooping to get domains being accessed
- Needs GFW L7 DNS rule for DNS snooping
- DNS server needs to be north of Tier-1 gateway
|
| URL Filtering (new in 3.2) |
NO |
YES
- Uses L7 Access Profile (subset of URL filtering)
- Uses L7 DPI/URL database for enforcement
- HTTPS traffic: Need TLS Decryption to enforce filtering URL path
|
| FQDN Filtering |
YES
- Using context profiles
- Uses DNS snooping to get FQDN to IP mapping for enforcement.
- Need DFW L7 DNS rule for DNS snooping
|
YES (in 3.2)
- Uses L7 Access Profile (subset of URL filtering)
- Uses L7 DPI/URL database for enforcement
|
