9Oca
Perimeter IP Address Blocking
Currently we have a Palo Alto FW that serves as our perimeter devices for our network. We are required by our contract to block certain IP addresses. Over time this list has grown to almost 150k entries. Palo has a limitation on the max number of entries that can be put into an External Dynamic List and we are quickly approaching this limitation. Upgrading hardware isn't an option as that will just kick the can down the road. Are there any other options or appliances that we can use to block IP addresses at the scale we are being requested to block? Thank you in advance.
