External IOC Feed limitation

[BG]

Hi all,

Lately I'm working on External IOC feeds on R81. Is there a total number of observables limit?

I have added 4-5 different feeds. Whenever these feeds have total of observables more than around 130.000, I see an error message on the Anti-Bot & Anti-Virus blade: "Error: Failed to gen PM for reputation patterns. too many patterns, PM size 138654"

I couldn't find any information on support center regarding this limit and behavior of the engine when this limit reached.

Anyone here experienced the same situation and how did you proceed?

Thanks in advance.

[_Val_]

There is a certain limitation with the feed size that may cause that message. Please open a TAC case to confirm and to see what can be done about this.

[Pawel_Szetela]

Hello,

We have the same problem. Do You have any news from TAC?

Regards