FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
nevan
Staff
Staff
Article Id 372870
Description

This article discusses the warning message 'The external resource contains more entries than is supported.

The maximum number of entries per resource is 131072. Any entries found after the maximum has been reached will be dropped, and why it appears.

Scope FortiGate.
Solution

As per the table, size has been limited to 10MB for the number of entries of blacklist IP in external resources it only supports 131072 IPs. If the user inputs more than these numbers, the entry will be taken as 'Invalid' and the following error will appear in the GUI:

 

Threat-Feed-GUI.png


As per the size, it cannot be possible to create more than 131072 valid entries and the table stats can be seen by the command 'diagnose sys external-resource stats'.

CLI:


diagnose sys external-resource stats
name: address; uuid_idx: 1280; type: address table; update_method: feed; truncated total lines: 131073; valid lines: 131072; error lines: 0; used: no; ranges: 0; name: ext-res-edm-1; uuid_idx: 1277; type: data; update_method: feed; total lines: 1; valid lines: 0; error lines: 0; used: yes

 

External resource entry limit enhancements were done in v7.4.4. Refer to the admin guide for the maximum number of entries and file size limit for each model range:

 

Screenshot 2025-06-10 122835.png

 

Related articles:

Threat feeds
Technical Tip: How to use an external resource on a remote HTTP or HTTPS server to block the user tr...
Technical Tip: External resource with Virtual Domains

Contributors