Debian Admin Debian/Ubuntu Linux System Administration Tutorials,Howtos,Tips By default paloalto firewall FQDN object only allows domain name and not wildcard domain.When an FQDN object is committed to the system, the management plane sends out periodic DNS queries to populate this object with IP addresses mapped from the DNS reply. These mapped IP addresses are then be pushed down to the dataplan