This article clarifies that the maximum URL patterns and maximum URLs in one URL pattern limit that can be configured on vSRX and TVP SRX platforms is as per design and cannot be increased.

Note: The SRX TVP platforms, which have a different architecture that differentiates the Packet Forwarding Engine (PFE) from the Junos OS, and additional API compatibility, include SRX1500, SRX4100, SRX4200 and SRX4600 and all variants of vSRX.

For example, on an SRX4100 device, when more than 3,000 URL patterns are configured, we will see the following error output after running the commit command.

Configuration example

set security utm custom-objects url-pattern test1 value www.juniper1.net
set security utm custom-objects url-pattern test2 value www.juniper2.net
--- <snip> ---
set security utm custom-objects url-pattern test3000 value www.juniper3000.net
set security utm custom-objects url-pattern test3001 value www.juniper3001.net

Result

root@SRX4100# commit
error: Too many url patterns.  <<< 
error: configuration check-out failed

When more than 1,000 URLs are configured in one url-pattern, we will see the following error output after running the commit command.

Configuration example

set security utm custom-objects url-pattern test value www.juniper1.net
set security utm custom-objects url-pattern test value www.juniper2.net
--- <snip> ---
set security utm custom-objects url-pattern test value www.juniper1000.net
set security utm custom-objects url-pattern test value www.juniper1001.net

Result

root@SRX4100# commit
error: The url-pattern test has more than 1000 urls!  <<<
error: configuration check-out failed

Use the following command in shell mode to check the maximum URL pattern number that can be configured. For example, max_url_pattern on SRX4100 is:

root@SRX4100:~ # sysctl -a | grep utm
<snip>
hw.product.pvi.config.utmd.max_cust_msg: 1500
hw.product.pvi.config.utmd.max_cmd_list: 1500
hw.product.pvi.config.utmd.max_cust_cat: 3000
hw.product.pvi.config.utmd.max_url_pattern: 3000   <<< Output example in SRX4100
hw.product.pvi.config.utmd.max_file_ext_list: 1500
hw.product.pvi.config.utmd.max_mime_pattern: 1500
hw.product.pvi.config.utmd.max_as_profile: 1500
hw.product.pvi.config.utmd.max_cf_profile: 1500
hw.product.pvi.config.utmd.max_av_profile: 1500
hw.product.pvi.config.utmd.max_wf_profile: 1500
hw.product.pvi.config.utmd.max_utm_policy: 1500

However, there is no CLI command to check the maximum URLs number that can be configured in one URL pattern. For all TVP SRX and vSRX platforms, the value is 1000.

Note: The max_url_pattern number could vary for different Junos OS versions or platforms. This is the current designed behavior. The maximum number cannot be increased.

For details on url-pattern configuration, refer to url-pattern.

Note: PR1206968 changed the following system settings:

The SRX TVP platform now supports 500 UTM policies/profiles/mime-patterns/filename-exts/command-lists and 1000 url-patterns/custom-categories. The other platforms have been left unchanged.

2021-07-23: Added list of max_url_pattern values for other SRX platforms and made other minor modifications

2022-07-26: Changed the Symptoms as commit will fail after configuring more than 3000 url-patterns, also changed the solution part to avoid confusing customer 

2022-08-18: Added list of TVP platfroms and mentioned SRX4100 result as an example; added URL list size in one url-pattern