topic Re: Custom URL Limit? in General Topics

Custom URL Limit?

SilverTiger — Thu, 20 Feb 2014 05:05:37 GMT

Hello~

I am looking around for custom URL Limit in support site

I got information each box entries is different

Refer to Information
Max number of custom URL categories (PAN OS 4.1): PA-5060 PA-5050 PA-5020 PA-4060 PA-4050 PA-4020 PA-2050 PA-2020 PA-500 PA-200 50 50 50 50 50 50 50 50 50 50 Max total entries - allow/block list and custom categories (PAN OS 4.1): PA-5060 PA-5050 PA-5020 PA-4060 PA-4050 PA-4020 PA-2050 PA-2020 PA-500 PA-200 100,000 50,000 25,000 25,000 25,000 25,000 25,000 25,000 25,000 25,000 Custom Category is 50 number and Custom URL Max total entries - allow/block list and custom categories (PAN OS 4.1):

Refer to Information

Max number of custom URL categories (PAN OS 4.1):

PA-5060 PA-5050 PA-5020 PA-4060 PA-4050 PA-4020 PA-2050 PA-2020 PA-500 PA-200

50 50 50 50 50 50 50 50 50 50

Max total entries - allow/block list and custom categories (PAN OS 4.1):

PA-5060 PA-5050 PA-5020 PA-4060 PA-4050 PA-4020 PA-2050 PA-2020 PA-500 PA-200

100,000 50,000 25,000 25,000 25,000 25,000 25,000 25,000 25,000 25,000

Custom Category is 50 number and Custom URL

Max total entries - allow/block list and custom categories (PAN OS 4.1):

I am testing from PA-3020

I guess that PA-3020 is same total entries as the others ones except PA-5000 series

but I haven't understood about MAX Total entries

Is there limit max url entries[sites] into each category? (Objects[TAB] - Custom Objects - URL Category)

Re: Custom URL Limit?

HULK — Thu, 20 Feb 2014 05:34:31 GMT

Hello Sir,

The custom URL categories feature allows you to create your own lists of URLs that can be selected in any URL filtering profile. Each custom category can be controlled independently and will have an action associated with it in each URL filtering profile (allow, block, continue, override, or alert). So, on your PA-3020 you can create MAX 50 custom URL categories and can add 25000 total url entries (cumulative) inside those 50 custom categories.

Example: URL entries can be added individually, or you can import a list of URLs. To do so, create a text file that contains the URLs to include, with one URL per line. Each URL can be in the format “www.example.com,” and can contain * as a wildcard, such as “*.example.com.

Thanks

Re: Custom URL Limit?

HULK — Thu, 20 Feb 2014 05:39:43 GMT

Forgot to mention that, there are no limit for max url entries[sites/url's] into each category. You can create a single category and add 25000 inside that category.

Thanks

Re: Custom URL Limit?

SilverTiger — Thu, 20 Feb 2014 08:14:37 GMT

Thank you for your response

I feel confused about that,, ^^;;;

into each custom category, can add urls without limit, Is it right?

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

there are no limit for max url entries[sites/url's] into each category. You can create a single category and add 25000 inside that category.

as aforementioned You can see thick words no limit for max url entries into each category

[underline]the other is that singe category add 25000 inside that category

What does them mean? :smileycry::smileycry:

If I add 20 number custom categories and into The each[20] category add same 10,000 urls

a mount of are 200000 20 * 10000

Is it possible?

as I know 25000 that share block/allow url list in url filtering profile and other urls into each custom category

sorry hulk~

Re: Custom URL Limit?

HULK — Thu, 20 Feb 2014 08:31:41 GMT

I don't think it will be possible, because the MAX url entries should be 25000.

If I add 20 number custom categories and into The each[20] category add same 10,000 urls >>>>>>> If you add the same URL into each URL category, then what is the purpose of creating 20 different URL-category...?

Example: you can add 50 custom categories and into the each [50] category, add different 500 urls on each category.

50 Custom categories * 500 url's on each = 25000 url total.

Thanks

Re: Custom URL Limit?

SilverTiger — Thu, 20 Feb 2014 10:06:14 GMT

I speak broken English :smileylaugh::smileylaugh::smileylaugh::smileylaugh::smileylaugh::smileycry::smileycry::smileycry::smileycry::smileycry::smileycry::smileycry:

sorry~

my customer is curious, also so am I

one of my customers setting white url list

as times goes on URLs number increase continuously

They want to add url list into only one url category

as you said 500 url's on each category

I think that in the future urls will have reached limit 500 urls in only one category

I knew that In PA All URL numbers shared where (block/allow in url filtering, in category numbers)

Re: Custom URL Limit?

NateNewman — Wed, 18 Nov 2020 21:23:08 GMT

Is there an newer Live article covering this subject?

Re: Custom URL Limit?

BPry — Thu, 19 Nov 2020 01:06:57 GMT

@NateNewman

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/external-dynamic-list.html

MODEL	URL LIST ENTRY LIMITS	DOMAIN LIST ENTRY LIMITS
PA-5200 Series, PA-7000 Series (upgraded with the PA-7000 20GXM NPC, PA-7000 20GQXM NPC, or the PA-7000 100G NPC). PA-7000 appliances with mixed NPCs only support the standard capacities.	250,000	4,000,000
VM-500, VM-700	100,000	2,000,000
PA-850, PA-820, PA-3200 Series	100,000	1,000,000
PA-7000 Series (and appliances upgraded with the PA-7000 20GQ NPC or the PA-7000 20G NPC), VM-300	100,000	500,000
PA-220, VM-50, VM-50 (Lite), VM-100, VM-1000-HV	50,000	50,000

Re: Custom URL Limit?

NateNewman — Thu, 19 Nov 2020 06:32:17 GMT

@BPry

That's for EDL are you saying that's it's same for custom URLs and custom URL categories?

thanks

Re: Custom URL Limit?

erikda — Thu, 19 Nov 2020 09:26:47 GMT

You should also be aware of this limitation:

Issue

Configurations with custom URL categories that match the same URLs can cause unpredictable results. With multiple custom URL categories that have overlapping regexes the URL will match multiple categories and an incorrect category may be chosen causing the wrong security policy to be used.

Resolution

Custom category URLs should not overlap with other custom categories. Regex patterns should be constructed so that only one category can match a given URL request.