Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

L3 Networker

Hello @SCalvanese,

I saw your post and have a few recommendations for you. You may want to look at it initially,


The maximum number of address objects you can resolve for an FQDN is increased from 10 of each address type (IPv4 and IPv6) to a maximum of 32 each. However, the combination of IPv4 and IPv6 addresses cannot exceed 512B; if it does, addresses that are not included in the first 512B are dropped and not resolved.


FQDN can also be helpful to control other services that don’t relate to web browsing like FTP, ssh, or any other service.


As a workaround, it is possible to configure the rule with  App-id [google-base] or by using a custom URL {}, instead of using FQDN Object

 Thanks and Regards,

Edison K Benny
Product Specialist
Palo Alto Networks
*Don’t forget to accept the solution provided!




Who rated this post