Replacing Network object - IP address with host

[mike18]

In our environment we have users who are using the proxy and users who are not using the proxy.

We have  internal users who are using the PRoxy --Browser with PAC http/https traffic goes via Webgateway.

Webgateway has exceptions for certain https websites that traffic goes via Firewall not webgateway--this is also for internal users who are using proxy.

Firewall is not doing the DNS for users.

Then we have Internal users who are not using the proxy there browser have no PAC file for these users http/https traffic goes via firewall not web gateway.

Firewall   rules

1>Rule 1        Web exceptions for websites for internal users who are using proxy and we want this traffic not to go via webgateway.

This is the rule we are having issues with network object  type IP address as often some https websites address gets changed.

2>Rule 2 is for internal users who are not using proxy and there all traffic http/https  is allowed too any website.

Under this rule under Application defense group we are using url filtering.

This rule 2 has application defense group called say url filter .

When i go to groups i see this group name called url filter.

When i select this group then on Right hand side under name i see this url filter group name at top.

Then on below window under  Application Defense i see                                                                 Name

                                                      http                                                                                           url filtering

Hope it make sense to you now.

Mike