Max limit for URL Categories in a single Security Policy Rule?

[JiHwanHam]

Hi everyone,

I'm trying to find the exact maximum limit for how many URL Categories (predefined + custom) can be added as match conditions in a single Security Policy Rule (under the Service/URL Category tab).

Checking the official capacity limits documentation (specifically for VM-500), I see limits for total custom URL categories (500 per VSYS) and total URL entries (100,000), but I couldn't find an explicit number for a single security rule.

Is there a specific hard limit on how many URL categories can be specified within one rule, or is it unbounded (limited only by overall config/XML limits)?

Any insight or official documentation references would be greatly appreciated.

Thanks!

[YEmreSeven]

Hi, 

You can check hardware limitations below link,

https://www.paloaltonetworks.com/products/product-selection

Or run "show system state filter cfg.general.max*" from CLI