PA specifiations and limitations

Showing results for 
Show  only  | Search instead for 
Did you mean: 

PA specifiations and limitations

L0 Member


We are using Panorama to manage all our PA devices. Depending on our needs, we use plateforms from PA500 to PA5050.  Last week we tried to commit a change to a PA500 and we get the message : address group limit exceeded !!!! At the moment we have 253 address groups. So the limit seems to be 250 address groups for a PA500.

Could you give us this kind of limitations for each of you device. I didn't find anything about this.



Not applicable

Good luck, man. I've asked for stuff like this for years and just get shot down. Their school of thought is just to let the customer experience an outage and then try to figure out why.

L3 Networker

The address group limit for the PA-500 is 250.

By using the command "show system state", we are able to have a look at all limitations !!

What i do not anderstand is : Why Panaroma send all objects to Firewall even if these Objects are not used within the policies !! It's really not optimal.

Is there any plan to change this and send only the usefull objects ? It's really not efficient for large companies having to deal with both large and small sites and who want to use Panorama.

Thanks a lot.

I believe that 4.0 has some functionality around scoping objects to only go to the firewalls which actually use them.

Thanks for this answer.

I took a look at Panorama (v4) but I did'nt find this feature :smileyconfused:

Can someone give more details about this feature ?

Clarification question. Do you have the firewalls in separate Device Groups on Panorama?



Yes we do have device groups. In fact, for all plateforms (except PA500) we use vsys and device-groups.

Thanks in advance.

  • 7 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!