EDL Scalability & Platform Limits – Best Practices

A.AlHafi — Mon, 13 Apr 2026 08:10:38 GMT

Hello Everyone,

Looking for best practice recommendations on handling large IP-based External Dynamic Lists (EDLs).

In cases where the EDL reaches platform limits (e.g., ~150K IPs), scalability becomes a challenge, especially when continuous updates are required and manual handling is not practical.

Would appreciate your input on:

More scalable alternatives or architectures
Best practices to avoid hitting such limits in production

Additionally, one quick clarification:

If an EDL is configured but not referenced in any security policy, does it still count toward platform limits?

Thanks in advance for your insights.

Re: EDL Scalability & Platform Limits – Best Practices

PavelK — Tue, 28 Apr 2026 06:02:10 GMT

Hello @A.AlHafi

thanks for posting!

Unfortunately, I do not think there is anything you can do to overcome EDL 150,000 IP address limit. The only thing I can think off is to have as many entries as possible configured as subnets rather than individual IP addresses. If this is possible for your use-case you could potentially reduce number of IP entries.

Regarding your second question the limit counts regardless EDL is referenced in policy or not.

Kind Regards

Pavel

topic EDL Scalability & Platform Limits – Best Practices in Next-Generation Firewall Discussions

EDL Scalability & Platform Limits – Best Practices

Re: EDL Scalability & Platform Limits – Best Practices