How to allow a whole domain?

Question

Dear All, My customer has their own domain, for example demo.com. How do I create the top rule to allow all of the *.demo.com domain for all services? 
 Thanks~

Aditya Patel · Answer

HI ShunzeLee, 
 Option 1: Allow By firewall rule : You may create FQDN rule with no policy applied. As for the domain your sub-domain would resolve with another address then you would need to add the. 
 Eg: abc.abc.com- . 1.1.1.1 
 xyz.abc.com- . 1.1.1.2 
 adc.abc.com -> 1.1.1.2 
 Then the FQDN you may add domain abc.abc.com and adc.abc.com as they resolve different host addresses. 
 Option 2 : Bypass from Web filter/Http/Https scanning . You may add an exception on the web filter, 
 EG ^([A-Za-z0-9.-]*\.)?demo\.com/

lferrara · Answer

ShunzeLee, 
 create a FQDN Host under Host and Services and then use it under Firewall rule. 
 See the screenshot. 
 
 XG know all the IP of microsoft.com domain. 
 Regards

Muhammad Imran Shaikh · Answer

How do i write this FDQN in host list <tenant>-my.sharepoint.com