Scale limits in network security perimeter

Presently, network security perimeter functionality can be used to support deployments of PaaS resources with common public network controls with following scale limitations:

These limits were deployed as soft limits. The updated limits will be as given in the table below and will now be implemented as hard limits

What do the changes mean to users?

1. Rule elements' creation limit will be capped at 200 for new customers. (presently at 500)
2. Existing customers who have rule elements >200 per profile, will be allowed to continue above 200 with an option to replace/edit, decrease/reduce but not increase/add the current rule elements without any service interruption till 10/31/26.
   1. For example, scenario(s): A user has a profile with rule elements = 400 
      1. They cannot increase/add new rule elements and try to go above 400.
      2. They can replace/edit existing rule elements and continue at 400.
      3. They can decrease/reduce rule elements to anything till 200 and that will be their upper ceiling i.e. if they reduce to 250, that will be their new upper ceiling.
      4. If they decrease/reduce to <200, say 150, they can go till 200 but not back to the 400.
3. After 10/31/26, profiles with rule elements above 200 will be allowed to continue above 200 but only with an option to reduce. There will be no replace/edit and increase options.
   1. For example, scenario(s): A user has a profile with rule elements = 400
      1. They cannot increase/add new rule elements and try to go above 400.
      2. They cannot replace/edit existing rule elements but can continue at 400 without touch the rule-elements.
      3. They can decrease/reduce rule elements to anything till 200 but cannot stop above 200 or maintain above 200.
      4. If they decrease/reduce to <200, say 150, they can go till 200 but not back to the 400.

For questions or clarifications, please reach out to nsppmvteam@microsoft.com