Method 1: Custom URL Category

Use this when you need to whitelist a wildcard domain like:

*.example.com

Normal Address Objects don't support wildcards.

Step 1 — Create URL Category

Go to:

Objects → Custom Objects → URL Category

Click Add.

Example:

Name: Whitelisted-Websites
Type: URL List

Add your domains:

*.example.com
*.microsoft.com
example.com
www.example.com

Rules:

• Don't use http:// or https://

• Use *.domain.com for subdomains

• Add example.com and www.example.com if needed

Click OK.

Step 2 — Add to Security Policy

Go to:

Policies → Security

Open your Internet access rule.

Go to:

Service/URL Category → URL Category

Click Add.

Select:

Whitelisted-Websites

Make sure the rule action is:

Allow

Click OK.

Step 3 — Commit

Click:

Commit

After the commit, test the website.

Check traffic under:

Monitor → URL

Alternative — URL Filtering Profile

You can also allow the custom category through a URL Filtering Profile.

Go to:

Objects → Security Profiles → URL Filtering

Open the profile used by your Security Policy.

Find your custom category and set it to:

allow

Quick Summary

Create Custom URL Category
        ↓
Add wildcard/domain
        ↓
Add category to Security Policy
        ↓
Set Action = Allow
        ↓
Commit
        ↓
Test website

That's it.