Custom URL Limit?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Custom URL Limit?

L3 Networker

Hello~

I am looking around for custom URL Limit in support site

I got information each box entries is different

Refer to Information

Max number of custom URL categories (PAN OS 4.1):

PA-5060 PA-5050 PA-5020 PA-4060 PA-4050 PA-4020 PA-2050 PA-2020 PA-500 PA-200

50 50 50 50 50 50 50 50 50 50

Max total entries - allow/block list and custom categories (PAN OS 4.1):

PA-5060 PA-5050 PA-5020 PA-4060 PA-4050 PA-4020 PA-2050 PA-2020 PA-500 PA-200

100,000 50,000 25,000 25,000 25,000 25,000 25,000 25,000 25,000 25,000

Custom Category is 50 number and Custom URL

Max total entries - allow/block list and custom categories (PAN OS 4.1):

I am testing from PA-3020

I guess that PA-3020 is same total entries as the others ones except PA-5000 series

but I haven't understood about MAX Total entries

Is there limit max url entries[sites] into each category? (Objects[TAB] - Custom Objects - URL Category)

9 REPLIES 9

L7 Applicator

Hello Sir,

The custom URL categories feature allows you to create your own lists of URLs that can be selected in any URL filtering profile. Each custom category can be controlled independently and will have an action associated with it in each URL filtering profile (allow, block, continue, override, or alert). So, on your PA-3020 you can create MAX 50 custom URL categories and can add 25000 total url entries (cumulative) inside those 50 custom categories.

Example: URL entries can be added individually, or you can import a list of URLs. To do so, create a text file that contains the URLs to include, with one URL per line. Each URL can be in the format “www.example.com,” and can contain * as a wildcard, such as “*.example.com.

Thanks

L7 Applicator

Forgot to mention that, there are no limit for max url entries[sites/url's] into each category. You can create a single category and add 25000 inside that category. Smiley Happy

Thanks

Thank you for your response

I feel confused about that,, ^^;;;

into each custom category, can add urls without limit, Is it right?

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

there are no limit for max url entries[sites/url's] into each category. You can create a single category and add 25000 inside that category.

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

as aforementioned You can see thick words no limit for max url entries into each category

[underline]the other is that singe category add 25000 inside that category

What does them mean? :smileycry::smileycry:

If I add 20 number custom categories and into The each[20] category add same 10,000 urls

a mount of are 200000   20 * 10000

Is it possible?

as I know 25000 that share block/allow url list in url filtering profile and other urls into each custom category

sorry hulk~

I don't think it will be possible, because the MAX url entries should be 25000.


If I add 20 number custom categories and into The each[20] category add same 10,000 urls  >>>>>>> If you add the same URL into each URL category, then what is the purpose of creating 20 different URL-category...?


Example: you can add 50 custom categories and into the each [50] category, add different 500 urls on each category.

50 Custom categories * 500 url's on each = 25000 url total. Smiley Happy

Thanks

I speak broken English :smileylaugh::smileylaugh::smileylaugh::smileylaugh::smileylaugh::smileycry::smileycry::smileycry::smileycry::smileycry::smileycry::smileycry:

sorry~

my customer is curious, also so am I

one of my customers setting white url list

as times goes on URLs number increase continuously

They want to add url list into only one url category

as you said 500 url's on each category

I think that in the future urls will have reached limit 500 urls in only one category

I knew that In PA All URL numbers shared where (block/allow in url filtering, in category numbers)

Is there an newer Live article covering this subject?

@NateNewman 

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/policy/use-an-external-dynamic-list-in-po...

 

MODEL
URL LIST ENTRY LIMITS
DOMAIN LIST ENTRY LIMITS
PA-5200 Series, PA-7000 Series (upgraded with the PA-7000 20GXM NPC, PA-7000 20GQXM NPC, or the PA-7000 100G NPC).
PA-7000 appliances with mixed NPCs only support the standard capacities.
250,000
4,000,000
VM-500, VM-700
100,000
2,000,000
PA-850, PA-820, PA-3200 Series
100,000
1,000,000
PA-7000 Series (and appliances upgraded with the PA-7000 20GQ NPC or the PA-7000 20G NPC), VM-300
100,000
500,000
PA-220, VM-50, VM-50 (Lite), VM-100, VM-1000-HV
50,000
50,000

@BPry

 

That's for EDL are you saying that's it's same for custom URLs and custom URL categories?

 

thanks

You should also be aware of this limitation:

 

Issue

Configurations with custom URL categories that match the same URLs can cause unpredictable results. With multiple custom URL categories that have overlapping regexes the URL will match multiple categories and an incorrect category may be chosen causing the wrong security policy to be used.

 

Resolution

Custom category URLs should not overlap with other custom categories. Regex patterns should be constructed so that only one category can match a given URL request.

  • 9281 Views
  • 9 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!