Skip to Content

How to fix cannot add firewall address group ;Check firewall address table limit’ in multiple VDOMs

By: Author Alex Lim

Posted on

Categories Troubleshooting

This article describes the solution when an error appear while pushing the address-group from FortiManager to FortiGate.

Scope

FortiGate.

Solution

Step 1: Check the table size using following command on the FortiGate:

print tablesize

Step 2: If there is still memory left, it is possible to push address-groups without any issues. If the memory allocated is full, following error will appear:

If there is still memory left, it is possible to push address-groups without any issues. If the memory allocated is full, following error will appear.

Step 3: Set the increase the limit using the following commands:

Fortigate-HUB# config global
Fortigate-HUB(global) # config system resource-limits
Fortigate-HUB(resource-limits) # show full
config system resource-limits
set log-disk-quota 12045
end
Fortigate-HUB(resource-limits) # set firewall-addrgrp
<integer> max-number within range 276-10692
Fortigate-HUB(resource-limits) # set firewall-addrgrp 10692
Fortigate-HUB(resource-limits) # end
Fortigate-HUB(global) # end
Fortigate-HUB#

Step 4: It is also possible to use the GUI to change the settings under Global VDOM > System > Global Resources:

It is also possible to use the GUI to change the settings.