Max limit for URL Categories in a single Security Policy Rule?

JiHwanHam — Wed, 26 Aug 2026 12:09:57 GMT

Hi everyone,

I'm trying to find the exact maximum limit for how many URL Categories (predefined + custom) can be added as match conditions in a single Security Policy Rule (under the Service/URL Category tab).

Checking the official capacity limits documentation (specifically for VM-500), I see limits for total custom URL categories (500 per VSYS) and total URL entries (100,000), but I couldn't find an explicit number for a single security rule.

Is there a specific hard limit on how many URL categories can be specified within one rule, or is it unbounded (limited only by overall config/XML limits)?

Any insight or official documentation references would be greatly appreciated.

Thanks!

Re: Max limit for URL Categories in a single Security Policy Rule?

YEmreSeven — Wed, 26 Aug 2026 13:12:50 GMT

Hi,

You can check hardware limitations below link,

https://www.paloaltonetworks.com/products/product-selection

Or run "show system state filter cfg.general.max*" from CLI

topic Re: Max limit for URL Categories in a single Security Policy Rule? in VM-Series in the Public Cloud

Max limit for URL Categories in a single Security Policy Rule?

Re: Max limit for URL Categories in a single Security Policy Rule?