Maximum profiles on PA-500?

[garret]

We recently received an error on our machine that says:

"Number of profiles exceeds vsys capacity (50)". 

Is 50 a hard limit or is there a configuration somewhere to increase this number?  We don't see anything in the documentation about max profiles and max profiles by different type of box.  Any help is greatly appreciated.

[garret]

And to clarify, it looks like the specs on this box are for 1000 policies and 5 profiles per policy, so that implies 5000 profiles.  Anything we're missing?

[apasupulati · Accepted solution]

Hello Garrett,

This is a hardware limit of max 50 profiles supported on the device and there is no configuration to change this. You may run the CLI command: 'show system state | match profile' and see the limits.

Also, 1000 is the max. policies supported and you may configure upto 6 profiles, each for Anti-virus, Vulnerability, Anti-spyware, URL filtering, file blocking and Data filtering. Although it does imply that more than a 50 could be configured, I don't think it talks about configuring a new profile for each type of inspection in every policy.

Hope that helps!

Thank you,

Aditi