Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
chinchira
Explorer

Compliance blade optimization

Hello guys, 

So we have a management server which had Compliance blade enabled. This was causing issues and had to be disabled. Whenever the blade is enabled we noticed very high CPU utilization by postgress. Also during this time it often crashed and couldnt get smartconsole access to the server. The crash could only be sorted by service restart- cpstop;cpstart. One thing to note is that the server had multiple policy packages with some having over a thousand rules each.

The question is how can Compliance be optimized so that it stops hogging postgress.

Is it possible to run compliance blade on a seperate server without impacting performance(read postgress) on the management server doing policy administration?

0 Kudos
4 Replies
Chris_Atkinson
Employee
Employee

There were several fixes in this area both in Smartconsole & Jumbos for Mgmt so it's important to understand your current version info to start?

Additionally when the compliance blade is enabled are a selection of regulations active or all of them and lastly...

When was the last time old DB revisions would have been purged if ever?

 

 

 

0 Kudos
chinchira
Explorer

Current version is R80.10 JHF-272.

Only 2 regulations are active.

On your last query, please elaborate further on the DB revision purging.

Thanks

0 Kudos
Chris_Atkinson
Employee
Employee

JHF Take 142 for R80.10 included fixes for Compliance, though there are other enhancements also in R80.20 + JHF.

Regarding Revision Management operations please see:

Purge.png

Refer also:

https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_SecurityManagement_AdminGuid...

0 Kudos
Corinne_Vakulen
Employee
Employee

Hello,

We made major improvements in R80.40 and beyond. You may want to upgrade or just download and test EVAL license.

 

Thanks

Corinne

0 Kudos