Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
kb1
Collaborator

Policy installation on active cluster on our internet firewall takes 14 minutes

So for the standby it takes just 4 minutes or even less but for the active it takes about 14 minutes or so, this started happening after our primary management server failed, now we are using the secondary management server as active, so should I be concerned? Do I open a ticket with tac and ask them why it's happening? We do have the new replacement for the primary management server and will soon be installing that (maybe in a week or more) but until then will be using this secondary for policy installations, the installation does happen successfully after 14 minutes every time only thing is I'm concerned as to why it happens slow in the active whereas quick on the standby.

 

Thank you.

0 Kudos
2 Replies
HeikoAnkenbrand
Champion Champion
Champion

Hi @kb1,

more read here:

sk44338: How to debug Policy Verification
sk31881: Debug of Security policy installation process

Policy installation process has several stages. More read here:

R80.x - Policy Installation Flowchar

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
0 Kudos
Timothy_Hall
Legend Legend
Legend

For the 14 minute install, at what percentage completion range does the installation procedure stall at for the longest.  Choose one:

0-49%

50-98%

99%

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events