topic Re: Maximum profiles on PA-500? in General Topics

Maximum profiles on PA-500?

garret — Sat, 08 Dec 2012 00:09:57 GMT

We recently received an error on our machine that says:

"Number of profiles exceeds vsys capacity (50)".

Is 50 a hard limit or is there a configuration somewhere to increase this number? We don't see anything in the documentation about max profiles and max profiles by different type of box. Any help is greatly appreciated.

Re: Maximum profiles on PA-500?

garret — Sat, 08 Dec 2012 00:43:35 GMT

And to clarify, it looks like the specs on this box are for 1000 policies and 5 profiles per policy, so that implies 5000 profiles. Anything we're missing?

Re: Maximum profiles on PA-500?

apasupulati — Sun, 09 Dec 2012 03:19:43 GMT

Hello Garrett,

This is a hardware limit of max 50 profiles supported on the device and there is no configuration to change this. You may run the CLI command: 'show system state | match profile' and see the limits.

Also, 1000 is the max. policies supported and you may configure upto 6 profiles, each for Anti-virus, Vulnerability, Anti-spyware, URL filtering, file blocking and Data filtering. Although it does imply that more than a 50 could be configured, I don't think it talks about configuring a new profile for each type of inspection in every policy.

Hope that helps!

Thank you,

Aditi