Which one would cause less resource impact for blocking malicious IPs?

[Blason_R]

Hi Team,

I am trying to figure out if I need to block more than 100,000 malicious IP addresses on the fly. Which one should I adopt?

dynamic_objects or fw samp policy?

Which one will have lesser impact on resources? Considering this one will be refreshed every one hour? 

TIA

Blason R

[PhoneBoy]

I say: depends on the version.
Assuming we're talking R80.x, I believe either will work.
Dynamic Objects don't support SecureXL Templates pre-R80.

[Blason_R]

Yes those are R80.x .