Did you know? Lightweight communication from SmartConsole to the server

[Tomer_Sole]

You may be familiar with SmartDashboard in R7x pulling every single network object and rule from the Security Management Server during the user login process. While this has been good for fast navigation between topics, this could cause significant waiting time until seeing the security policy, and also a large RAM consumption by the SmartDashboard GUI application.

R80 has eliminated this behavior with paged results. 

SmartConsole only requests from the Security Management Server the objects and rules it will show on the screen. And it does not load more than 50-100 network objects or rules per request. This has proved to be a significant change especially for large-scale deployments.

If you have thousands of security rules or millions of network objects, with R80.10 you might get a very different experience comparing to previous releases.

R80.10 Security Management architecture and platform allows us to create products that we couldn't create before. This new interaction is one of them.

[Kaspars_Zibarts]

It certainly has improved the performance when client is located close to the server. The downside is for cases when administrator and management server are located far apart. In our case management server is in Europe and administrators that are based in Latin America could not work with SmartDashboard after R80 upgrade do to the latency and constant object pull. We were forced to install a jumpserver in Europe in order for them to be able to work with SmartDashboard..

[Tomer_Sole]

Would you mind sharing what was your connection speed at the time? This could be the factor that mattered.

[Kaspars_Zibarts]

Hej  Tomer,

basically our administrators in Brazil complained that dashboard became unusable / too slow after R80 upgrade. MDM is located in Sweden. So we had to added a jumphost in Sweden for them that they can RDP to and use Dashboard there instead.

We raised the issue with Dorit during CPX in Mailan but the short answer was "this is a small price to pay for improvements we got with R80.."

But if you have good ideas how to address clients that are ~200ms away from management server then let us know

Regards
Kaspars