Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Martin_Valenta
Advisor

Concurrent policy install on r80.x

Are there any plans to enable option to push multiple policies at same time and not sequeantually? 

0 Kudos
11 Replies
Timothy_Hall
Legend Legend
Legend

Install Policy Presets introduced in R80.20 MDM can install policies simultaneously in different Domain Management Servers (CMAs); you can also schedule regular policy installs.  However only one policy can be installed at a time within a single Domain Management Server/CMA, and based on how that is done internally that limitation is unlikely to change anytime soon.

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
Martin_Valenta
Advisor

I'm aware of this, but really was looking for parallel policy install on same CMA/domain
0 Kudos
G_W_Albrecht
Legend Legend
Legend

For most users, this is not really important, i fear 😉

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
Alex-
Leader Leader
Leader

There is the policy API where you could script and install the policies if you have a larger installation base in a single management station. 

https://sc1.checkpoint.com/documents/latest/APIs/#gui-cli/install-policy~v1.5%20

It wouldn't be concurrent but at least you could create a script that would daisy-chain the policy pushes of your environment.

0 Kudos
Tommy_Forrest
Advisor

It's important to me.  We have a moderate size build and it's frustrating that 2 admins could be working in 2 different policies on the same CMA but one has to wait until the other is finished.

 

And sometimes, it can take awhile for policy push to finish.

Maarten_Sjouw
Champion
Champion

We have quite some customers with more than one policy and therefore the option to install in 2 policies in parallel would save us a lot of waiting time. I understand this would be limited when using VSX as this is always passed through VS0.
But in cases where we ie use the same APCL/URLF layer for a central and satellites this will save time.
Regards, Maarten
0 Kudos
PhoneBoy
Admin
Admin

By R80.20, the policy install time should be around 2 minutes.
If you're experiencing significantly longer policy install times, please open a TAC case so we can investigate.

As for supporting parallel policy installs, not sure what the plans are.
0 Kudos
Tommy_Forrest
Advisor

2 minutes is a very, very long time.

0 Kudos
Maarten_Sjouw
Champion
Champion

Wow, then we must have a lot of customers with way to slow systems, we had (in R77.30 and R80.10) some customers with almost all blades enabled that take around 10 to 15 minutes to install. Even on R80.30 management and R80.10/R80.20 gateways we still see times of 5 min plus.
Regards, Maarten
PhoneBoy
Admin
Admin

Understand the 2 minute number I quoted was the design target I was given by R&D specifically for R80.20.
We definitely want to reduce this time.

0 Kudos
Timothy_Hall
Legend Legend
Legend

Just to update this old thread, up to 5 total concurrent policy installations per domain/SMS are allowed starting in R81.

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events