topic Re: Limits in Old Palo Alto models in General Topics

Limits in Old Palo Alto models

Logan_mad — Wed, 22 Apr 2020 17:00:15 GMT

Hi,

I am trying to find out the number of objects and groups of objects of the old models PA-3020, PA-3050, PA-3060 and PA-5050.

In the new models, these data appear in the product comparison of the Palo Alto website, so I understand that these limits are static and do not vary depending on their capacity.

However for the old models I only find that I must issue the command "show system state | match cfg.general.max-address" this refers to the maximum number of addresses but not of total objects, including those created for services or applications, in addition indicates that it depends on the capacity of each team.

Can you tell me where I can find these characteristics for the old models?

Thanks in advance 😉

Regards,

Re: Limits in Old Palo Alto models

kiwi — Wed, 22 Apr 2020 22:29:47 GMT

Hi @Logan_mad ,

The old models aren't listed on the official comparison page anymore because they are end-of-sale.

That said, a google search quickly finds the information on the old models on other websites.

For example:

PA-3000 models

PA-5000 models

I hope this helps,

-Kiwi.

Re: Limits in Old Palo Alto models

Logan_mad — Thu, 23 Apr 2020 07:36:18 GMT

Hi Kiwi,

Thanks for your response and your links 😉

What I want to confirm is that these values are not variable in terms of capacity and version of the device. The comparison of the links are on the PAN-OS 7.1 version. and in the output of the command "show system state filter cfg.general.max" does not indicate the total objects.

I have found information on other models that according to their version these values vary, so my doubts.

For example the PA-5220
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boAQCAY

Thanks again for your answer,

Regards,

Re: Limits in Old Palo Alto models

kiwi — Thu, 23 Apr 2020 08:44:37 GMT

Hi @Logan_mad ,

Thank you for clarifying your query.

This upgrade was only for select models ... not the old ones.

Here's a full list of all the models that were impacted and their upgrades:

Objects Capacity Improvements on the PA-5220 and PA-3200 Series Firewalls

Hope this helps,

-Kiwi.