topic commit failed custom url category exceed shared capacity in Next-Generation Firewall Discussions

commit failed custom url category exceed shared capacity

DAEHOJUNG — Mon, 22 May 2023 05:54:33 GMT

Hi, I have an issue about commit failed

When upgrading the OS from 9.1.12 to 10.0.0, auto commit is not possible due to the following error.

: error:Number of custom-url-category/external-url-list(51) exceeds shared capacity(50)

: After restoring to 9.1.12, commit is possible, and the number of shares of Custom URL Category of 9.1.12 and 10.0.0 is the same as 50.

As an additional confirmation

1. During PanOS 10.0 Upgrade, <Palo Alto Networks - Authentication Portal Exclude List> is newly created in EDL.

2. Randomly delete one from the previously set custom-url-category (total of 49 after deletion) and proceed with commit to complete normally.

Q1. What is the maximum number of custom-url-category in pan os 10.0?

Q2. Are the number of custom-url-category and EDL added to capacity?

Re: commit failed custom url category exceed shared capacity

BPry — Mon, 22 May 2023 12:59:04 GMT

@DAEHOJUNG,

What hardware platform are you using? PAN-OS itself has an upper limit of 500 custom categories in any particular VSYS and 2,849 as the maximum across any of the hardware platforms. However older hardware lime the PA-200 and PA-3020 I know had a 50 custom URL category limit as platform limits.

Re: commit failed custom url category exceed shared capacity

DAEHOJUNG — Tue, 23 May 2023 01:13:53 GMT

Hi BPry, Thanks for reply. HW platform is PA-5200 series.

I also checked what you said in the knowledge base.

However, it was not confirmed whether the capacity was shared between custom-url-category and EDL in the virtual system.

Re: commit failed custom url category exceed shared capacity

DAEHOJUNG — Fri, 26 May 2023 01:18:26 GMT

Capacity sharing was verified through TAC case.

Custom-url-category shared object and EDL are shared same capacity.

I hope this content helps others as well.