H3C SecPath F100-C-A1防火墙里面如何添加域名白名单

试试这个方法

使用静态 DNS 解析
将域名手动解析为 IP 地址，然后添加这些 IP 到对象组中：
配置静态 DNS 映射：
[H3C] system-view
[H3C] ip host ***.*** 111.206.242.64 # 高德地图IP
[H3C] ip host ***.*** 111.206.242.65 # 高德地图备用IP
[H3C] ip host ***.*** 121.36.16.64 # 彩云天气IP
验证解析结果：
[H3C] display ip host
创建对象组并添加解析后的 IP 地址：
[H3C] object-group ip address domain-group
[H3C-obj-grp-ip-domain-group] description 高德彩云天气服务
[H3C-obj-grp-ip-domain-group] host 111.206.242.64
[H3C-obj-grp-ip-domain-group] host 111.206.242.65
[H3C-obj-grp-ip-domain-group] host 121.36.16.64
在安全策略中引用该对象组：
[H3C] security-policy
[H3C-policy-security] rule 10 permit
[H3C-policy-security-rule-10] source-ip any
[H3C-policy-security-rule-10] destination-ip domain-group
[H3C-policy-security-rule-10] service any