- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
08-02-2021 09:57 AM
Hi
The capacity for dynamic addresses on the pa-820 according to this article is 1000 https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/monitor-changes-in-the-virtual-envi...
But that seems to be a little out of the 2500 that your commit error has which is the limit of the 850, hope that helps a little at least.
08-02-2021 11:19 AM
Are you managing this directly or through Panorama? Panorama by default will attempt to sync all shared objects to a firewall even if they aren't being utilized in policy on that device. You can modify this by clearing the Share Unused Address and Service Objects with Devices option so that only shared objects that are actually referenced are being pushed.
If you are managing this locally directly on the firewall then I would do the following:
The article that you mentioned is very specific to DAG IP addresses and not actual address objects, where the 820 can have 2,500.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!