From today, Rawstream Network Security adds the capability to allow or block domains based on wildcards. Wildcard support is being rolled out across all our DNS IPs right now and will be complete across the next few hours. The entries will match on the full domain queried, including subdomains.

As an example: a wildcard entry for sw*.apple.com will match all the domains (swcdn.apple.com, swdownload.apple.com, swquery.apple.com, swscan.apple.com) used by Apple products for software updates.

Wildcard support allows IT admins to set granular policies to allow or deny access to specific subdomains while still allowing access to other subdomains or the parent domain.

Subdomains can be listed in the the Allow and Block. A block list entry for subdomain.parentdomain.com will block the subdomain but allow access to the parent domain.