ShowPolicyPackage - Performance

[S_E_]

Hi,

ShowPolicyPackage is a great tool.

However, when running against a MDSM to a certain domain (CMA), it takes a while. So it could be easily up to 90 Minutes. Of course I guess it depends on the size of the domain and amount of objects. Extracting the tgz file, it is around 50 MB

I checked the show-package.elg file and do not see any specific error or warning.

Current used script version is v2.02,  MDSM R80.30

used command is:

java -jar web_api_show_package-jar-with-dependencies.jar -c --show-membership true --dereference-group-members false --query-limit 500 -d DOMAIN1

So I'm now struggling a little bit if this is simply a huge db or a suboptimal configuration of the script.

Anyone who can share his experience ?

Thanks

Regards

[PhoneBoy]

How many rules are we talking here?
I could see it taking a while on larger rulebase.

[S_E_]

hi

one example(domain) has 4 Access Control Policies with around 250 Rules each and 4 small NAT policies. But a lot of nested object groups.

Regards

[PhoneBoy]

Nested group objects could cause it as well.

[S_E_]

Hi,

looking at the elg file shows this. However no error or warning. So I do not know the bottleneck. 

Regards

[4/23/20 3:25 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: There are 2668 nested object(s) to retrieve (with limit 500)
[4/23/20 3:26 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 2863
[4/23/20 3:27 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 2995
[4/23/20 3:28 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 2595
[4/23/20 3:29 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 2160
[4/23/20 3:30 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 1746
[4/23/20 3:31 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 1241
[4/23/20 3:31 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 748
[4/23/20 3:32 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 500 objects were retrieved. New size of nested objects queue is 280
[4/23/20 3:33 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 272 objects were retrieved. New size of nested objects queue is 41
[4/23/20 3:33 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.buildPackagePolicy()INFO]: 41 objects were retrieved. New size of nested objects queue is 0

[PhoneBoy]

That accounts for at least 8 minutes of the delay right there.