Commit failure when having total 50 shared Custom URL Categories

1206

Created On 05/18/23 08:16 AM - Last Modified 04/07/25 21:18 PM

Custom URL

URL Category

URL Filtering

10.0

10.2

10.1

11.0

PAN-OS

Next-Generation Firewall

Strata

Symptom

There's no issue to commit with 50 shared Custom URL Categories (Objects > Custom Objects > URL Category) in PAN-OS version 9.1.
However, commit is failing along with the following error when having 50 shared Custom URL Categories in PAN-OS version 10.0 or above.
```
Error: Number of custom-url-category/external-url-list (51) exceeds shared capacity (50)
(Module: device)
```
In the same environment as above, commit is successful when having 49 shared Custom URL Categories that is one less than the capacity.

A new feature added a predefined EDL which takes 1 space from the capacity of shared Custom URL Categories from PAN-OS version 10.0.
The predefined EDL taking the space is Palo Alto Networks - Authentication Portal Exclude List (Objects > External Dynamic Lists).

This is an expected behavior in PAN-OS version 10.0 and above.
The workaround is to create non-shared Custom URL Categories instead, as the non-shared capacity is higher.
Refer to What is the Maximum Limit of Custom URL Categories?