topic FQDN with 80 characters not resolving in Address object in General Topics

FQDN with 80 characters not resolving in Address object

Ben-Price — Thu, 12 Aug 2021 04:30:36 GMT

Hi All,

I have a client running PAN OS 8.1.3 Panorama 9.1.3, that is trying to implement an Address object with an FQDN that is 80 characters long. When clicking the resolve button in the Address object GUI it does not resolve. When running the command 'request system fqdn show' or a ping to those domain's they do resolve in the CLI. All other FQDNs I have tried resolve including one that is 59 characters resolve correctly in the GUI.

I have tested the same 80 character FQDN in PAN OS 10.0.1 in the GUI and it does seem to resolve.

So I am wondering if this may be a bug or limitation of the Address object in the GUI in earlier versions of PAN OS? Has anyone come across this before?

Thanks in advance as always.

Re: FQDN with 80 characters not resolving in Address object

reaper — Thu, 12 Aug 2021 10:09:11 GMT

Sounds like a GUI limitation, have you reached out t support?

Re: FQDN with 80 characters not resolving in Address object

Ben-Price — Fri, 03 Sep 2021 00:26:41 GMT

@reaper I didn't reach out to support, but this does look like a GUI limitation in PAN OS 8.1 (tested version 8.1.3 and 8.1.19) and it was unable to resolve in the GUI. It would resolve fine in the CLI and when you used the FQDN in a security policy rule.

Tested the 80 character FQDN in PAN OS 10.0.1 and it does resolve in the GUI.