Forum Discussion
saddiq_bilal
Altocumulus
AltocumulusF5 object groups in AFM
Hello guys, In our infra F5 is internet facing and behind F5 we have palo alto firewall. So, we are blocking malicious Ips in F5 and palo alto to secure the network. Now, palo alto blocking group li...
Hello saddiq_bilal
Address list should support 65k ips, the limit on the firewall address-list / port-lists is due to the mcpd DB size so you might need to adjust it– see https://my.f5.com/manage/s/article/K17883124
However, performance degradation might occur with large numbers of IPs, so I advise to test it. check MCPD and and increase if you have less free space .
Kendall_Brennei
Moderator
ModeratorTo add on, I also found K10978895: Blocking malicious traffic using the IP Intelligence feature in BIG-IP AFM that walks through how to go about blocking IPs if you're interested in taking the next step.
