EDL Scalability & Platform Limits – Best Practices

[A.AlHafi]

Hello Everyone,

Looking for best practice recommendations on handling large IP-based External Dynamic Lists (EDLs).

In cases where the EDL reaches platform limits (e.g., ~150K IPs), scalability becomes a challenge, especially when continuous updates are required and manual handling is not practical.

Would appreciate your input on:

• More scalable alternatives or architectures 
• Best practices to avoid hitting such limits in production

Additionally, one quick clarification:

• If an EDL is configured but not referenced in any security policy, does it still count toward platform limits?

Thanks in advance for your insights.

[PavelK]

Hello @A.AlHafi

thanks for posting!

Unfortunately, I do not think there is anything you can do to overcome EDL 150,000 IP address limit. The only thing I can think off is to have as many entries as possible configured as subnets rather than individual IP addresses. If this is possible for your use-case you could potentially reduce number of IP entries.

Regarding your second question the limit counts regardless EDL is referenced in policy or not.

Kind Regards

Pavel