Forum Discussion

saddiq_bilal's avatar
saddiq_bilal
Icon for Altocumulus rankAltocumulus
Aug 18, 2025
Solved

F5 object groups in AFM

Hello guys, In our infra F5 is internet facing and behind F5 we have palo alto firewall. So, we are blocking malicious Ips in F5 and palo alto to secure the network. Now, palo alto blocking group li...
  • Aswin_mk's avatar
    Aug 18, 2025

    Hello saddiq_bilal​ 

     

    Address list should support 65k ips, the limit on the firewall address-list / port-lists is due to the mcpd DB size so you might need to adjust it– see https://my.f5.com/manage/s/article/K17883124

    However, performance degradation might occur with large numbers of IPs, so I advise to test it. check MCPD and and increase if you have less free space .