topic Re: what is the maximum ignore list entries? in General Topics

what is the maximum ignore list entries?

Netsupp — Thu, 25 Sep 2014 06:52:13 GMT

I am going to add a bunch of service acct into pan agnet 5.0.6 for pa FW to ignore the mapping.

but i wonder is there maximum entries of the ignore list file ?

Re: what is the maximum ignore list entries?

HULK — Thu, 25 Sep 2014 07:09:41 GMT

Hello Netsupp,

PAN OS 4.1 onwards, there is no hard coded limit for maximum entries of the ignore list file.

Thanks

Re: what is the maximum ignore list entries?

reaper — Thu, 25 Sep 2014 07:12:06 GMT

There is no hard limit to the amount of entries you can put in the ignore list, but there may be a limitation depending on the amount of logs that need to be processed every x seconds (default is 1 second) as each auth success log will need to be checked against the entire list of excluded users versus the resources available to the server to perform this task swiftly.

Tom

Re: what is the maximum ignore list entries?

Retired Member — Thu, 25 Sep 2014 13:33:26 GMT

Most of the limist can be seen with system state but this is a special thing and related to an agent.

maybe there is a limit for internal agentless system for ignore list.

Re: what is the maximum ignore list entries?

hshah — Thu, 25 Sep 2014 14:09:17 GMT

There is no such limit ...