Creating a WebGroup

If the Distributed Cloud Firewall (DCF) feature is disabled, WebGroups are not available.

To create a new WebGroup:

  1. On the Security > Distributed Cloud Firewall > WebGroups tab, click +WebGroup.

  2. Configure the following:

    Field Description

    Name

    Enter a name for the WebGroup.

    Type

    Domains or URLs

    In the Domains/URLs field, enter the domains or URLs. You can enter either domains or URLs in one WebGroup; they cannot be mixed.

    Domains/URLs

    Enter the domains or URLs for the WebGroup.

  1. Click Save.

    If the domain name contains any incorrect wildcard formatting, the WebGroup is not created. You must correct the formatting and try again.

Domain and URL Examples

Full wildcard support is available for both URL and domain-based WebGroups.

Domains

Domain names can contain:

  • *. (asterisk and dot)

  • * (asterisk only)

  • - (dash), _ (underscore), alphanumeric, and dots

    A domain name is only valid if characters are alphanumeric, dots, dashes, underscores, or asterisks. The domain can start with any of these characters.

Domain examples:

  • Leading wildcard: *app.deepsecurity.trendmicro.com

  • Subdomain wildcard: egrc*.s3.amazonaws.com

  • Host suffix wildcard: ftp-*.osuosl.org

  • Complex multi-wildcard: patch-baseline-snapshot-*-*-*.*.amazonaws.com

  • Malformed example: foo**bar.example.com (contains two asterisks in a row, which is not allowed)

Any TLS protocol is supported for domains, along with HTTP.

URLs

The following URL examples are valid for use in your WebGroups:

Viewing WebGroup Details

You can click a WebGroup name in the list to view its details in the right-hand pane.

webgroup details