Policy installation on active cluster on our internet firewall takes 14 minutes

[kb1]

So for the standby it takes just 4 minutes or even less but for the active it takes about 14 minutes or so, this started happening after our primary management server failed, now we are using the secondary management server as active, so should I be concerned? Do I open a ticket with tac and ask them why it's happening? We do have the new replacement for the primary management server and will soon be installing that (maybe in a week or more) but until then will be using this secondary for policy installations, the installation does happen successfully after 14 minutes every time only thing is I'm concerned as to why it happens slow in the active whereas quick on the standby.

Thank you.

[HeikoAnkenbrand]

Hi @kb1,

more read here:

sk44338: How to debug Policy Verification
sk31881: Debug of Security policy installation process

Policy installation process has several stages. More read here:

R80.x - Policy Installation Flowchar

[Timothy_Hall]

For the 14 minute install, at what percentage completion range does the installation procedure stall at for the longest.  Choose one:

0-49%

50-98%

99%