Palo Alto Networks Knowledgebase: How are Dynamic Block List Entries Counted on the Firewall?
How are Dynamic Block List Entries Counted on the Firewall?
Created On 02/08/19 00:00 AM - Last Updated 02/08/19 00:00 AM
The dynamic block list itself will be counted as a single address object by the firewall. The IP addresses contained in the dynamic block list are not counted towards the address object limits on the firewall.
For example, a single dynamic block list that contains 500 IP addresses will count as 1 address object.