Compliance blade optimization

[chinchira]

Hello guys, 

So we have a management server which had Compliance blade enabled. This was causing issues and had to be disabled. Whenever the blade is enabled we noticed very high CPU utilization by postgress. Also during this time it often crashed and couldnt get smartconsole access to the server. The crash could only be sorted by service restart- cpstop;cpstart. One thing to note is that the server had multiple policy packages with some having over a thousand rules each.

The question is how can Compliance be optimized so that it stops hogging postgress.

Is it possible to run compliance blade on a seperate server without impacting performance(read postgress) on the management server doing policy administration?

[Chris_Atkinson]

There were several fixes in this area both in Smartconsole & Jumbos for Mgmt so it's important to understand your current version info to start?

Additionally when the compliance blade is enabled are a selection of regulations active or all of them and lastly...

When was the last time old DB revisions would have been purged if ever?

[chinchira]

Current version is R80.10 JHF-272.

Only 2 regulations are active.

On your last query, please elaborate further on the DB revision purging.

Thanks

[Chris_Atkinson]

JHF Take 142 for R80.10 included fixes for Compliance, though there are other enhancements also in R80.20 + JHF.

Regarding Revision Management operations please see:

Refer also:

https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_SecurityManagement_AdminGuid...

[Corinne_Vakulen]

Hello,

We made major improvements in R80.40 and beyond. You may want to upgrade or just download and test EVAL license.

Thanks

Corinne