Commit failure when having total 50 shared Custom URL Categories

Commit failure when having total 50 shared Custom URL Categories

1506
Created On 05/18/23 08:16 AM - Last Modified 04/07/25 21:18 PM


Symptom


  • There's no issue to commit with 50 shared Custom URL Categories (Objects > Custom Objects > URL Category) in PAN-OS version 9.1.
  • However, commit is failing along with the following error when having 50 shared Custom URL Categories in PAN-OS version 10.0 or above.
    Error: Number of custom-url-category/external-url-list (51) exceeds shared capacity (50)
    (Module: device)
    
  • In the same environment as above, commit is successful when having 49 shared Custom URL Categories that is one less than the capacity.


Environment


  • Palo Alto Firewalls
  • PAN-OS 10.0 and above
  • Custom URL Category


Cause


  • A new feature added a predefined EDL which takes 1 space from the capacity of shared Custom URL Categories from PAN-OS version 10.0.
  • The predefined EDL taking the space is Palo Alto Networks - Authentication Portal Exclude List (Objects > External Dynamic Lists).


Resolution


  1. This is an expected behavior in PAN-OS version 10.0 and above.
  2. The workaround is to create non-shared Custom URL Categories instead, as the non-shared capacity is higher.
  3. Refer to What is the Maximum Limit of Custom URL Categories? 


Additional Information


Reference: Objects > Custom Objects > URL Category

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1r4CAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail