Best Of

@JohnS I've seen customers with well over 500 rules on small devices. There is a ceiling to how many policies you can have, but it has to do with the amount of memory available on the device, not the number of policies.

For example, if you load each policy with a server load balancing policy that sources from an extensive list of FQDNs, you'd probably max out at around 50.

(When customers find that limit, they're almost always asking more of their firewall than it's capable of, and it's almost always on the smallest devices we sell. The M4800 should reasonably be capable of handling thousands of complex policies if needed.)

Not a problem for you.
I have over 100 policies on a T20.

Hi @JohnS

For traffic management policies per-ip you are correct. There is a limit per-policy.

There's a few ways around this:

-Making rules by subnet (works best with /23s and /24s because of the per IP limitation)

-Using user groups instead of IPs to implement the policy.
See: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/authentication/sso_quick_start.html