Policy commit failures due to profiles exceeding platform capacity using version 10.1.8-h2

RandyQueen — Mon, 29 Jan 2024 16:26:27 GMT

We have not updated the number of profiles and have been successfully committing policy for probably a year with this same number of policies, but all of a sudden we are not able to commit policy pushes either from gui or cli.

We have gone through and deleted alot of shared profiles and are still getting the following error:

Error: Total number of profiles (792) exceeds platform capacity (750) (Module: device) client useridd phase 1 failure Commit failed.

We used shared objects and we have over 20 vsys on this firewall and have been told that these objects are shared across those vsys and that is why the max limit has been reached. However, we don't know why this just started happening when it has been working with the same number of profiles for a long time.

Re: Policy commit failures due to profiles exceeding platform capacity using version 10.1.8-h2

iarobertson — Thu, 01 Feb 2024 00:40:27 GMT

Hello @RandyQueen - I would recommend you raise a TAC case for this issue; they may be able to advise why the change in behaviour post upgrade.

topic Re: Policy commit failures due to profiles exceeding platform capacity using version 10.1.8-h2 in Next-Generation Firewall Discussions

Policy commit failures due to profiles exceeding platform capacity using version 10.1.8-h2

Re: Policy commit failures due to profiles exceeding platform capacity using version 10.1.8-h2