This article contains information on using wildcard symbols in Protocols White List.
When using wild cards (* and ?) in Protocols White List, NetworkLock performs reversed name resolving of IP address (similar to 'ping -a' command) into a domain name and compares it to items in the white list. This, however, does not happen with items without wildcards.Sometimes reversed IP resolving returns a name different from the one in the WhiteList thus causing its dysfunction.
'mail.google.com' is resolved into 22.214.171.124.126.96.36.199 is resolved backward into 'arn06s02-in-f22.1e100.net'.
Thus, '*.google.com' record in Protocols White List does not allow access to the specified resource, while 'mail.google.com' does.