There was a thread about a month ago where some people were asking about wildcarding with Custom Categories and with URL Groups. I replied but now have a KB article written. I thought I would share. It also describes how to use these as a blacklist or whitelist.
https://community.sophos.com/kb/en-us/127270
This thread was automatically locked due to age.