Maximum values for FortiPAM hardware appliances and VM

The following table lists the maximum number of configuration objects per FortiPAM appliance that can be added to the configuration database for different FortiPAM hardware or VM models.

Features

Table-instance limit ¹

(VDOM limit) ²

[Global limit]³

FortiPAM 1000G

FortiPAM 3000G

FortiPAM-VM

Secret

Folder

2000

(2000)

[2000]

6000

(6000)

[6000]

6000

(6000)

[6000]

Database

5000

(5000)

[5000]

10000

(10000)

[10000]

10000

(10000)

[10000]

Request

5000

(5000)

[5000]

10000

(10000)

[10000]

10000

(10000)

[10000]

Secret launcher

Initial commands

(0)

[0]

(0)

[0]

(0)

[0]

Clean commands

(0)

[0]

(0)

[0]

(0)

[0]

System

Zone

(200)

[0]

(500)

[0]

(500)

[0]

Zone interface

(0)

[0]

(0)

[0]

(0)

[0]

Interface

(0)

[8192]

(0)

[8192]

(0)

[8192]

Interface secondary IP address

(0)

[0]

(0)

[0]

(0)

[0]

Interface IPv6 prefix list

(0)

[0]

(0)

[0]

(0)

[0]

Interface DHCP snooping server list

255

(0)

[2048]

255

(0)

[2048]

255

(0)

[2048]

Account profile

(0)

[64]

(0)

[64]

(0)

[64]

Admin

(0)

[1000]

(0)

[3000]

(0)

[3000]

SNMP community

(0)

[3]

(0)

[3]

(0)

[3]

SNMP community hosts

(0)

[0]

(0)

[0]

(0)

[0]

SNMP community hosts6

(0)

[0]

(0)

[0]

(0)

[0]

SNMP user

(0)

[32]

(0)

[32]

(0)

[32]

Session TTL port

(512)

[0]

(512)

[0]

(512)

[0]

DHCP server

(1024)

[0]

(4192)

[0]

(4192)

[0]

DHCP server options

(0)

[0]

(0)

[0]

(0)

[0]

DHCP server reserved address

(5000)

[0]

(5000)

[0]

(5000)

[0]

DHCP server IP range

(0)

[0]

(0)

[0]

(0)

[0]

DHCP server exclude range

(0)

[0]

(0)

[0]

(0)

[0]

MAC address table

(2000)

[0]

(2000)

[0]

(2000)

[0]

ARP table

(16834)

[16834]

(16834)

[16834]

(16834)

[16834]

Proxy ARP

(256)

[0]

(256)

[0]

(256)

[0]

TOS based priority

(16)

[0]

(16)

[0]

(16)

[0]

DSCP based priority

(64)

[0]

(64)

[0]

(64)

[0]

Replacement message group

(200)

[0]

(200)

[0]

(200)

[0]

Central management server list

100

(0)

[0]

100

(0)

[0]

100

(0)

[0]

Replacement message images

(0)

[21]

(0)

[21]

(0)

[21]

SAML service-providers assertion-attributes

(0)

[0]

(0)

[0]

(0)

[0]

DNS server hostname

(0)

[0]

(0)

[0]

(0)

[0]

DDNS server IP

(0)

[0]

(0)

[0]

(0)

[0]

VDOM DNS server-hostname

(0)

[0]

(0)

[0]

(0)

[0]

DNS database

(4096)

[0]

(4096)

[0]

(4096)

[0]

DNS IPS URL filter

(0)

[20]

(0)

[20]

(0)

[20]

DNS6 IPS URL filter

(0)

[20]

(0)

[20]

(0)

[20]

GRE tunnel

(0)

[0]

(0)

[0]

(0)

[0]

VXLAN

(0)

[0]

(0)

[0]

(0)

[0]

User

RADIUS server

(10)

[0]

(10)

[0]

(10)

[0]

pop3

(10)

[0]

(10)

[0]

(10)

[0]

RADIUS accounting server

(0)

[0]

(0)

[0]

(0)

[0]

TACACS+ server

(10)

[0]

(10)

[0]

(10)

[0]

LDAP server

(64)

[0]

(64)

[0]

(64)

[0]

SAML server

(10)

[0]

(10)

[0]

(10)

[0]

FortiTokens

(0)

[1000]

(0)

[5000]

(0)

[5000]

Local

(5000)

[0]

(0)

[0]

(0)

[0]

Peer

(5000)

[0]

(0)

[0]

(0)

[0]

Peer user group

(5000)

[0]

(5000)

[0]

(5000)

[0]

Peer user group members

50000

(0)

[0]

50000

(0)

[0]

50000

(0)

[0]

Address groups

(1024)

[1024]

(8192)

[8192]

(8192)

[8192]

User FSSO polling address groups

(1024)

[0]

(8192)

[0]

(8192)

[0]

User group

(2000)

[0]

(5000)

[0]

(5000)

[0]

User group members

3000

(0)

[0]

3000

(0)

[0]

3000

(0)

[0]

User group guests

1024

(0)

[0]

1024

(0)

[0]

1024

(0)

[0]

FSSO

(5)

[0]

(5)

[0]

(5)

[0]

FSSO polling

(100)

[100]

(100)

[100]

(100)

[100]

Web filter FortiGuard local

(52)

[0]

(52)

[0]

(52)

[0]

Firewall

Address

(40000)

[40000]

(100000)

[100000]

(100000)

[100000]

IPv6 Address

(40000)

[40000]

(100000)

[100000]

(100000)

[100000]

Custom wildcard FQDN

(512)

[512]

(512)

[512]

(512)

[512]

Wildcard FQDN group

(512)

[512]

(512)

[512]

(512)

[512]

Proxy address

(24576)

[24576]

(24576)

[24576]

(24576)

[24576]

Service custom

(1024)

[0]

(4096)

[0]

(4096)

[0]

Service group

(4000)

[0]

(10000)

[0]

(10000)

[0]

Service group member

300

(0)

[0]

300

(0)

[0]

300

(0)

[0]

Onetime schedule

(5000)

[0]

(5000)

[0]

(5000)

[0]

Recurring schedule

(1024)

[0]

(1024)

[0]

(1024)

[0]

IP pool

(512)

[0]

(512)

[0]

(512)

[0]

Profile group

(1000)

[1000]

(20000)

[20000]

(20000)

[20000]

Profile protocol options

(500)

[500]

(500)

[500]

(500)

[500]

SSH profile

(500)

[500]

(500)

[500]

(500)

[500]

SSH profile SSL exempt

255

(0)

[0]

255

(0)

[0]

255

(0)

[0]

Firewall VIP

(32768)

[32768]

(32768)

[32768]

(32768)

[32768]

VIP monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP real servers

(0)

[0]

256

(0)

[0]

256

(0)

[0]

VIP real servers monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP group

(500)

[0]

(500)

[0]

(500)

[0]

VIP group member

500

(0)

[0]

500

(0)

[0]

500

(0)

[0]

IP MAC binding table

(2048)

[0]

(2048)

[0]

(2048)

[0]

Address group

(20000)

[20000]

(20000)

[20000]

(20000)

[20000]

Address group IPv6

(20000)

[20000]

(20000)

[20000]

(20000)

[20000]

Address group member

1500

(0)

[0]

(0)

[0]

(0)

[0]

Proxy address group

(4096)

[4096]

(4096)

[4096]

(4096)

[4096]

Proxy address group member

24000

(0)

[0]

24000

(0)

[0]

24000

(0)

[0]

SSH host key

2000

(0)

[0]

2000

(0)

[0]

2000

(0)

[0]

SSH local key

(100)

[0]

(100)

[0]

(100)

[0]

SSH local CA

(100)

[0]

(100)

[0]

(100)

[0]

Policy

(100000)

[100000]

(200000)

[200000]

(200000)

[200000]

Custom log fields

(0)

[0]

(0)

[0]

(0)

[0]

Poolname

(0)

[0]

(0)

[0]

(0)

[0]

VIP6

(32768)

[32768]

(32768)

[32768]

(32768)

[32768]

VIP6 monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP6 real servers

(0)

[0]

(0)

[0]

(0)

[0]

VIP6 real servers monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP6 group

(500)

[0]

(500)

[0]

(500)

[0]

VIP6 group member

500

(0)

[0]

500

(0)

[0]

500

(0)

[0]

Central SNAT map

(30000)

[30000]

(30000)

[30000]

(30000)

[30000]

Internet service entry port-range

(0)

[64]

(0)

[64]

(0)

[64]

Service category

(5000)

[5000]

(10000)

[10000

(10000)

[10000

WAN OPT profile

(128)

[0]

(256)

[0]

(256)

[0]

WAN OPT peer

(1024)

[0]

(2048)

[0]

(2048)

[0]

WAN OPT authentication group

(128)

[0]

(256)

[0]

(256)

[0]

WAN OPT SSL server

(128)

[0]

(256)

[0]

(256)

[0]

LDP monitor

(256)

[0]

(512)

[0]

(512)

[0]

Traffic shaper

(500)

[0]

(500)

[0]

(500)

[0]

VPN SSL web portal

(2600)

[2600]

(2600)

[2600]

(2600)

[2600]

VPN SSL web portal: bookmark-group: bookmarks

256

(0)

[0]

256

(0)

[0]

256

(0)

[0]

VPN SSL web user group: bookmark

(2000)

[2600]

(2000)

[2600]

(2000)

[2600]

VPN SSL web user group bookmark: bookmarks

128

(0)

[0]

128

(0)

[0]

128

(0)

[0]

VPN SSL web user bookmark: bookmarks

128

(0)

[0]

128

(0)

[0]

128

(0)

[0]

IPS: custom

(256)

[256]

(1000)

[1000]

(1000)

[1000]

Router

Static

(10000)

[0]

(10000)

[0]

(10000)

[0]

Policy

(2048)

[2048]

(2048)

[2048]

(2048)

[2048]

Static6

(10000)

[0]

(10000)

[0]

(10000)

[0]

VPN

Local certificate

(500)

[0]

(1000)

[0]

(1000)

[0]

CA certificate

(500)

[0]

(500)

[0]

(500)

[0]

CRL certificate

(200)

[0]

(200)

[0]

(200)

[0]

IPSec phase1 interface

(0)

[0]

(0)

[0]

(0)

[0]

IPSec phase2 interface

(0)

[0]

(0)

[0]

(0)

[0]

Web filter FortiGuard: local rating

(12000)

[0]

(12000)

[0]

(12000)

[0]

Application

List

(256)

[256]

(1000)

[1000]

(1000)

[1000]

Custom

(1000)

[0]

(9000)

[0]

(9000)

[0]

CASI profile

(256)

[256]

(1000)

[1000

(1000)

[1000

IPS

Sensor

(256)

[256]

(1000)

[1000]

(1000)

[1000]

Sensor override exempt IP address

(0)

[0]

(0)

[0]

(0)

[0]

Web filter

Profile

(1000)

[1000]

(20000)

[20000]

(20000)

[20000]

Web keyword-match

(64)

[0]

(64)

[0]

(64)

[0]

Content

(1000)

[0]

(2000)

[0]

(2000)

[0]

Content entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Exmword

(1000)

[0]

(2000)

[0]

(2000)

[0]

Exmword entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

URL filter

(256)

[256]

(1000)

[1000]

(1000)

[1000]

URL filter entries

(32000)

[32000]

(250000)

[250000]

(250000)

[250000]

Override

(200)

[0]

(500)

[0]

(500)

[0]

DNS filter

Profile

(32)

[32]

(500)

[500]

(500)

[500]

Domain filter

(32)

[32]

(256)

[256]

(256)

[256]

Profile: domain-filter: external-blocklist

(0)

[0]

(0)

[0]

(0)

[0]

Domain filter entries

(32000)

[32000]

(250000)

[250000]

(250000)

[250000]

Email filter

Profile

(32)

[0]

(500)

[0]

(500)

[0]

Bword

(1000)

[0]

(2000)

[0]

(2000)

[0]

Block allowlist

(1000)

[0]

(2000)

[0]

(2000)

[0]

DNSBL

(1000)

[0]

(2000)

[0]

(2000)

[0]

IP trust

(1000)

[0]

(2000)

[0]

(2000)

[0]

Mheader

(1000)

[0]

(2000)

[0]

(2000)

[0]

Bword entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Block allow list entries

(100000)

[0]

(500000)

[0]

(500000)

[0]

DNSBL entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

IP trust entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Mheader entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Antivirus

Profile

(32)

[0]

(500)

[0]

(500)

[0]

Content type

(1000)

[0]

(2000)

[0]

(2000)

[0]

DLP

File pattern entries

32000

(0)

[0]

250000

(0)

[0]

250000

(0)

[0]

File pattern

(5000)

[5000]

(12500)

[12500]

(12500)

[12500]

Sensor

(1000)

[1000]

(1500)

[1500]

(1500)

[1500]

Sensor filter

3000

(0)

[0]

4000

(0)

[0]

4000

(0)

[0]

Sensitivity

(128)

[0]

(128)

[0]

(128)

[0]

File filter

Profile

(1000)

[1000]

(1500)

[1500]

(1500)

[1500]

Profile rules

3000

(0)

4000

(0)

[0]

4000

(0)

[0]

Report layout

Report layout

(32)

[0]

(32)

[0]

(32)

[0]

Body item

256

(0)

[0]

256

(0)

[0]

256

(0)

[0]

Page header item

(0)

[0]

(0)

[0]

(0)

[0]

Page footer item

(0)

[0]

(0)

[0]

(0)

[0]

Log threat

Weight geolocation

(10)

[0]

(10)

[0]

(10)

[0]

Weight web

(96)

[0]

(96)

[0]

(96)

[0]

Weight application

(32)

[0]

(32)

[0]

(32)

[0]

Log setting: custom-log-fields

(0)

[0]

(0)

[0]

(0)

[0]

Log tap-device

(0)

[3]

(0)

[3]

(0)

[3]

System automation-trigger: fields

(0)

[0]

(0)

[0]

(0)

[0]

SSH-filter.profile: shell-commands

256

(0)

[0]

256

(0)

[0]

256

(0)

[0]

Endpoint-control fctems

(0)

[5]

(0)

[5]

(0)

[5]

System object-tagging

(4096)

[4096]

(4096)

[4096]

(4096)

[4096]

System HA: HA-mgmt-interfaces

(0)

[1]

(0)

[1]

(0)

[1]

System HA:unicast-peers

(0)

[7]

(0)

[7]

(0)

[7]

System SDN-connector

(0)

[16]

(0)

[16]

(0)

[16]

Log FortiAnalyzer setting: serial

(0)

Log ForitAnalyzer2 setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log ForitAnalyzer3 setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log FortiAnalyzer override setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log FortiAnalyzer2 override setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log FortiAnalyzer3 override setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

System SSO Admin

(0)

[300]

(0)

[550]

(0)

[550]

Firewall internet-service-name

(0)

[8192]

(0)

[8192]

(0)

[8192]

System SSO-FortiCloud-admin

(0)

[300]

(0)

[550]

(0)

[550]

System NETHSM: servers

(0)

[2]

(0)

[2]

(0)

[2]

System NETHSM: slots

(0)

[10]

(0)

[10]

(0)

[10]

System NETHSM: HA group

(0)

[2]

(0)

[2]

(0)

[2]

System interface MAC

(0)

[600]

(0)

[600]

(0)

[600]

¹The maximum number of entries in each table instance.

²The maximum number of entries over all tables of the same type within each VDOM.

³The maximum number of entries over all tables of the same type within the system.

Note: 0 indicates no limit.

Maximum values for FortiPAM hardware appliances and VM

The following table lists the maximum number of configuration objects per FortiPAM appliance that can be added to the configuration database for different FortiPAM hardware or VM models.

Features

Table-instance limit ¹

(VDOM limit) ²

[Global limit]³

FortiPAM 1000G

FortiPAM 3000G

FortiPAM-VM

Secret

Folder

2000

(2000)

[2000]

6000

(6000)

[6000]

6000

(6000)

[6000]

Database

5000

(5000)

[5000]

10000

(10000)

[10000]

10000

(10000)

[10000]

Request

5000

(5000)

[5000]

10000

(10000)

[10000]

10000

(10000)

[10000]

Secret launcher

Initial commands

(0)

[0]

(0)

[0]

(0)

[0]

Clean commands

(0)

[0]

(0)

[0]

(0)

[0]

System

Zone

(200)

[0]

(500)

[0]

(500)

[0]

Zone interface

(0)

[0]

(0)

[0]

(0)

[0]

Interface

(0)

[8192]

(0)

[8192]

(0)

[8192]

Interface secondary IP address

(0)

[0]

(0)

[0]

(0)

[0]

Interface IPv6 prefix list

(0)

[0]

(0)

[0]

(0)

[0]

Interface DHCP snooping server list

255

(0)

[2048]

255

(0)

[2048]

255

(0)

[2048]

Account profile

(0)

[64]

(0)

[64]

(0)

[64]

Admin

(0)

[1000]

(0)

[3000]

(0)

[3000]

SNMP community

(0)

[3]

(0)

[3]

(0)

[3]

SNMP community hosts

(0)

[0]

(0)

[0]

(0)

[0]

SNMP community hosts6

(0)

[0]

(0)

[0]

(0)

[0]

SNMP user

(0)

[32]

(0)

[32]

(0)

[32]

Session TTL port

(512)

[0]

(512)

[0]

(512)

[0]

DHCP server

(1024)

[0]

(4192)

[0]

(4192)

[0]

DHCP server options

(0)

[0]

(0)

[0]

(0)

[0]

DHCP server reserved address

(5000)

[0]

(5000)

[0]

(5000)

[0]

DHCP server IP range

(0)

[0]

(0)

[0]

(0)

[0]

DHCP server exclude range

(0)

[0]

(0)

[0]

(0)

[0]

MAC address table

(2000)

[0]

(2000)

[0]

(2000)

[0]

ARP table

(16834)

[16834]

(16834)

[16834]

(16834)

[16834]

Proxy ARP

(256)

[0]

(256)

[0]

(256)

[0]

TOS based priority

(16)

[0]

(16)

[0]

(16)

[0]

DSCP based priority

(64)

[0]

(64)

[0]

(64)

[0]

Replacement message group

(200)

[0]

(200)

[0]

(200)

[0]

Central management server list

100

(0)

[0]

100

(0)

[0]

100

(0)

[0]

Replacement message images

(0)

[21]

(0)

[21]

(0)

[21]

SAML service-providers assertion-attributes

(0)

[0]

(0)

[0]

(0)

[0]

DNS server hostname

(0)

[0]

(0)

[0]

(0)

[0]

DDNS server IP

(0)

[0]

(0)

[0]

(0)

[0]

VDOM DNS server-hostname

(0)

[0]

(0)

[0]

(0)

[0]

DNS database

(4096)

[0]

(4096)

[0]

(4096)

[0]

DNS IPS URL filter

(0)

[20]

(0)

[20]

(0)

[20]

DNS6 IPS URL filter

(0)

[20]

(0)

[20]

(0)

[20]

GRE tunnel

(0)

[0]

(0)

[0]

(0)

[0]

VXLAN

(0)

[0]

(0)

[0]

(0)

[0]

User

RADIUS server

(10)

[0]

(10)

[0]

(10)

[0]

pop3

(10)

[0]

(10)

[0]

(10)

[0]

RADIUS accounting server

(0)

[0]

(0)

[0]

(0)

[0]

TACACS+ server

(10)

[0]

(10)

[0]

(10)

[0]

LDAP server

(64)

[0]

(64)

[0]

(64)

[0]

SAML server

(10)

[0]

(10)

[0]

(10)

[0]

FortiTokens

(0)

[1000]

(0)

[5000]

(0)

[5000]

Local

(5000)

[0]

(0)

[0]

(0)

[0]

Peer

(5000)

[0]

(0)

[0]

(0)

[0]

Peer user group

(5000)

[0]

(5000)

[0]

(5000)

[0]

Peer user group members

50000

(0)

[0]

50000

(0)

[0]

50000

(0)

[0]

Address groups

(1024)

[1024]

(8192)

[8192]

(8192)

[8192]

User FSSO polling address groups

(1024)

[0]

(8192)

[0]

(8192)

[0]

User group

(2000)

[0]

(5000)

[0]

(5000)

[0]

User group members

3000

(0)

[0]

3000

(0)

[0]

3000

(0)

[0]

User group guests

1024

(0)

[0]

1024

(0)

[0]

1024

(0)

[0]

FSSO

(5)

[0]

(5)

[0]

(5)

[0]

FSSO polling

(100)

[100]

(100)

[100]

(100)

[100]

Web filter FortiGuard local

(52)

[0]

(52)

[0]

(52)

[0]

Firewall

Address

(40000)

[40000]

(100000)

[100000]

(100000)

[100000]

IPv6 Address

(40000)

[40000]

(100000)

[100000]

(100000)

[100000]

Custom wildcard FQDN

(512)

[512]

(512)

[512]

(512)

[512]

Wildcard FQDN group

(512)

[512]

(512)

[512]

(512)

[512]

Proxy address

(24576)

[24576]

(24576)

[24576]

(24576)

[24576]

Service custom

(1024)

[0]

(4096)

[0]

(4096)

[0]

Service group

(4000)

[0]

(10000)

[0]

(10000)

[0]

Service group member

300

(0)

[0]

300

(0)

[0]

300

(0)

[0]

Onetime schedule

(5000)

[0]

(5000)

[0]

(5000)

[0]

Recurring schedule

(1024)

[0]

(1024)

[0]

(1024)

[0]

IP pool

(512)

[0]

(512)

[0]

(512)

[0]

Profile group

(1000)

[1000]

(20000)

[20000]

(20000)

[20000]

Profile protocol options

(500)

[500]

(500)

[500]

(500)

[500]

SSH profile

(500)

[500]

(500)

[500]

(500)

[500]

SSH profile SSL exempt

255

(0)

[0]

255

(0)

[0]

255

(0)

[0]

Firewall VIP

(32768)

[32768]

(32768)

[32768]

(32768)

[32768]

VIP monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP real servers

(0)

[0]

256

(0)

[0]

256

(0)

[0]

VIP real servers monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP group

(500)

[0]

(500)

[0]

(500)

[0]

VIP group member

500

(0)

[0]

500

(0)

[0]

500

(0)

[0]

IP MAC binding table

(2048)

[0]

(2048)

[0]

(2048)

[0]

Address group

(20000)

[20000]

(20000)

[20000]

(20000)

[20000]

Address group IPv6

(20000)

[20000]

(20000)

[20000]

(20000)

[20000]

Address group member

1500

(0)

[0]

(0)

[0]

(0)

[0]

Proxy address group

(4096)

[4096]

(4096)

[4096]

(4096)

[4096]

Proxy address group member

24000

(0)

[0]

24000

(0)

[0]

24000

(0)

[0]

SSH host key

2000

(0)

[0]

2000

(0)

[0]

2000

(0)

[0]

SSH local key

(100)

[0]

(100)

[0]

(100)

[0]

SSH local CA

(100)

[0]

(100)

[0]

(100)

[0]

Policy

(100000)

[100000]

(200000)

[200000]

(200000)

[200000]

Custom log fields

(0)

[0]

(0)

[0]

(0)

[0]

Poolname

(0)

[0]

(0)

[0]

(0)

[0]

VIP6

(32768)

[32768]

(32768)

[32768]

(32768)

[32768]

VIP6 monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP6 real servers

(0)

[0]

(0)

[0]

(0)

[0]

VIP6 real servers monitor

(0)

[0]

(0)

[0]

(0)

[0]

VIP6 group

(500)

[0]

(500)

[0]

(500)

[0]

VIP6 group member

500

(0)

[0]

500

(0)

[0]

500

(0)

[0]

Central SNAT map

(30000)

[30000]

(30000)

[30000]

(30000)

[30000]

Internet service entry port-range

(0)

[64]

(0)

[64]

(0)

[64]

Service category

(5000)

[5000]

(10000)

[10000

(10000)

[10000

WAN OPT profile

(128)

[0]

(256)

[0]

(256)

[0]

WAN OPT peer

(1024)

[0]

(2048)

[0]

(2048)

[0]

WAN OPT authentication group

(128)

[0]

(256)

[0]

(256)

[0]

WAN OPT SSL server

(128)

[0]

(256)

[0]

(256)

[0]

LDP monitor

(256)

[0]

(512)

[0]

(512)

[0]

Traffic shaper

(500)

[0]

(500)

[0]

(500)

[0]

VPN SSL web portal

(2600)

[2600]

(2600)

[2600]

(2600)

[2600]

VPN SSL web portal: bookmark-group: bookmarks

256

(0)

[0]

256

(0)

[0]

256

(0)

[0]

VPN SSL web user group: bookmark

(2000)

[2600]

(2000)

[2600]

(2000)

[2600]

VPN SSL web user group bookmark: bookmarks

128

(0)

[0]

128

(0)

[0]

128

(0)

[0]

VPN SSL web user bookmark: bookmarks

128

(0)

[0]

128

(0)

[0]

128

(0)

[0]

IPS: custom

(256)

[256]

(1000)

[1000]

(1000)

[1000]

Router

Static

(10000)

[0]

(10000)

[0]

(10000)

[0]

Policy

(2048)

[2048]

(2048)

[2048]

(2048)

[2048]

Static6

(10000)

[0]

(10000)

[0]

(10000)

[0]

VPN

Local certificate

(500)

[0]

(1000)

[0]

(1000)

[0]

CA certificate

(500)

[0]

(500)

[0]

(500)

[0]

CRL certificate

(200)

[0]

(200)

[0]

(200)

[0]

IPSec phase1 interface

(0)

[0]

(0)

[0]

(0)

[0]

IPSec phase2 interface

(0)

[0]

(0)

[0]

(0)

[0]

Web filter FortiGuard: local rating

(12000)

[0]

(12000)

[0]

(12000)

[0]

Application

List

(256)

[256]

(1000)

[1000]

(1000)

[1000]

Custom

(1000)

[0]

(9000)

[0]

(9000)

[0]

CASI profile

(256)

[256]

(1000)

[1000

(1000)

[1000

IPS

Sensor

(256)

[256]

(1000)

[1000]

(1000)

[1000]

Sensor override exempt IP address

(0)

[0]

(0)

[0]

(0)

[0]

Web filter

Profile

(1000)

[1000]

(20000)

[20000]

(20000)

[20000]

Web keyword-match

(64)

[0]

(64)

[0]

(64)

[0]

Content

(1000)

[0]

(2000)

[0]

(2000)

[0]

Content entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Exmword

(1000)

[0]

(2000)

[0]

(2000)

[0]

Exmword entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

URL filter

(256)

[256]

(1000)

[1000]

(1000)

[1000]

URL filter entries

(32000)

[32000]

(250000)

[250000]

(250000)

[250000]

Override

(200)

[0]

(500)

[0]

(500)

[0]

DNS filter

Profile

(32)

[32]

(500)

[500]

(500)

[500]

Domain filter

(32)

[32]

(256)

[256]

(256)

[256]

Profile: domain-filter: external-blocklist

(0)

[0]

(0)

[0]

(0)

[0]

Domain filter entries

(32000)

[32000]

(250000)

[250000]

(250000)

[250000]

Email filter

Profile

(32)

[0]

(500)

[0]

(500)

[0]

Bword

(1000)

[0]

(2000)

[0]

(2000)

[0]

Block allowlist

(1000)

[0]

(2000)

[0]

(2000)

[0]

DNSBL

(1000)

[0]

(2000)

[0]

(2000)

[0]

IP trust

(1000)

[0]

(2000)

[0]

(2000)

[0]

Mheader

(1000)

[0]

(2000)

[0]

(2000)

[0]

Bword entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Block allow list entries

(100000)

[0]

(500000)

[0]

(500000)

[0]

DNSBL entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

IP trust entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Mheader entries

(32000)

[0]

(250000)

[0]

(250000)

[0]

Antivirus

Profile

(32)

[0]

(500)

[0]

(500)

[0]

Content type

(1000)

[0]

(2000)

[0]

(2000)

[0]

DLP

File pattern entries

32000

(0)

[0]

250000

(0)

[0]

250000

(0)

[0]

File pattern

(5000)

[5000]

(12500)

[12500]

(12500)

[12500]

Sensor

(1000)

[1000]

(1500)

[1500]

(1500)

[1500]

Sensor filter

3000

(0)

[0]

4000

(0)

[0]

4000

(0)

[0]

Sensitivity

(128)

[0]

(128)

[0]

(128)

[0]

File filter

Profile

(1000)

[1000]

(1500)

[1500]

(1500)

[1500]

Profile rules

3000

(0)

4000

(0)

[0]

4000

(0)

[0]

Report layout

Report layout

(32)

[0]

(32)

[0]

(32)

[0]

Body item

256

(0)

[0]

256

(0)

[0]

256

(0)

[0]

Page header item

(0)

[0]

(0)

[0]

(0)

[0]

Page footer item

(0)

[0]

(0)

[0]

(0)

[0]

Log threat

Weight geolocation

(10)

[0]

(10)

[0]

(10)

[0]

Weight web

(96)

[0]

(96)

[0]

(96)

[0]

Weight application

(32)

[0]

(32)

[0]

(32)

[0]

Log setting: custom-log-fields

(0)

[0]

(0)

[0]

(0)

[0]

Log tap-device

(0)

[3]

(0)

[3]

(0)

[3]

System automation-trigger: fields

(0)

[0]

(0)

[0]

(0)

[0]

SSH-filter.profile: shell-commands

256

(0)

[0]

256

(0)

[0]

256

(0)

[0]

Endpoint-control fctems

(0)

[5]

(0)

[5]

(0)

[5]

System object-tagging

(4096)

[4096]

(4096)

[4096]

(4096)

[4096]

System HA: HA-mgmt-interfaces

(0)

[1]

(0)

[1]

(0)

[1]

System HA:unicast-peers

(0)

[7]

(0)

[7]

(0)

[7]

System SDN-connector

(0)

[16]

(0)

[16]

(0)

[16]

Log FortiAnalyzer setting: serial

(0)

Log ForitAnalyzer2 setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log ForitAnalyzer3 setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log FortiAnalyzer override setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log FortiAnalyzer2 override setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

Log FortiAnalyzer3 override setting: serial

(0)

[0]

(0)

[0]

(0)

[0]

System SSO Admin

(0)

[300]

(0)

[550]

(0)

[550]

Firewall internet-service-name

(0)

[8192]

(0)

[8192]

(0)

[8192]

System SSO-FortiCloud-admin

(0)

[300]

(0)

[550]

(0)

[550]

System NETHSM: servers

(0)

[2]

(0)

[2]

(0)

[2]

System NETHSM: slots

(0)

[10]

(0)

[10]

(0)

[10]

System NETHSM: HA group

(0)

[2]

(0)

[2]

(0)

[2]

System interface MAC

(0)

[600]

(0)

[600]

(0)

[600]

¹The maximum number of entries in each table instance.

²The maximum number of entries over all tables of the same type within each VDOM.

³The maximum number of entries over all tables of the same type within the system.

Note: 0 indicates no limit.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

Release Notes

Maximum values for FortiPAM hardware appliances and VM

Maximum values for FortiPAM hardware appliances and VM

Maximum values for FortiPAM hardware appliances and VM

Maximum values for FortiPAM hardware appliances and VM