Domain Name Sets in Websense supports wildcards. You need to add a domain name set based exception. From Getting Started Guide, Configuring exceptions:
- Under Firewall Policy, select Network Objects from the Toolbox.
- Right-click Domain Name Sets and click New Domain Name Set.
- Give the new set a name (e.g., Forcepoint Web Security Cloud Unproxied).
In the Domain names included in this set section, add all Forcepoint
Web Security Cloud global exceptions (from the Forcepoint Web Security
Cloud PAC file). These include the following Microsoft Windows update
sites:
download.microsoft.com
ntservicepack.microsoft.com
cdm.microsoft.com
wustat.windows.com
windowsupdate.microsoft.com
*.windowsupdate.microsoft.com
update.microsoft.com
*.update.microsoft.com
*.windowsupdate.com