Hi, I think the regex expression you put is not correct...
The documentation says that a dot [.] without bracket will match any caracter. Then, just to test, I used the test regex command ciscoasa# test regex badspammermcom "badspammer.com" INFO: Regular expression match succeeded. In my opinion, the expression should be one of those: "badspammer[.]com" "badspammer\.com" So that it would only match the exact domain, but not something similar Check my tests ciscoasa# test regex badspammermcom "badspammer[.]com" INFO: Regular expression match failed. ciscoasa# test regex badspammer.com "badspammer[.]com" INFO: Regular expression match succeeded. ciscoasa# test regex badspammer.com "badspammer\.com" INFO: Regular expression match succeeded. ciscoasa# test regex badspammermcom "badspammer\.com" INFO: Regular expression match failed. Regards
