Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Concurrent policy install on r80.x

Are there any plans to enable option to push multiple policies at same time and not sequeantually? 

0 Kudos
10 Replies
Highlighted

Install Policy Presets introduced in R80.20 MDM can install policies simultaneously in different Domain Management Servers (CMAs); you can also schedule regular policy installs.  However only one policy can be installed at a time within a single Domain Management Server/CMA, and based on how that is done internally that limitation is unlikely to change anytime soon.

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com
0 Kudos
Highlighted

I'm aware of this, but really was looking for parallel policy install on same CMA/domain
0 Kudos
Highlighted
Sapphire

For most users, this is not really important, i fear 😉

0 Kudos
Highlighted
Silver

There is the policy API where you could script and install the policies if you have a larger installation base in a single management station. 

https://sc1.checkpoint.com/documents/latest/APIs/#gui-cli/install-policy~v1.5%20

It wouldn't be concurrent but at least you could create a script that would daisy-chain the policy pushes of your environment.

0 Kudos
Highlighted

It's important to me.  We have a moderate size build and it's frustrating that 2 admins could be working in 2 different policies on the same CMA but one has to wait until the other is finished.

 

And sometimes, it can take awhile for policy push to finish.

Highlighted

We have quite some customers with more than one policy and therefore the option to install in 2 policies in parallel would save us a lot of waiting time. I understand this would be limited when using VSX as this is always passed through VS0.
But in cases where we ie use the same APCL/URLF layer for a central and satellites this will save time.
Regards, Maarten
0 Kudos
Highlighted
Admin
Admin

By R80.20, the policy install time should be around 2 minutes.
If you're experiencing significantly longer policy install times, please open a TAC case so we can investigate.

As for supporting parallel policy installs, not sure what the plans are.
0 Kudos
Highlighted

2 minutes is a very, very long time.

0 Kudos
Highlighted

Wow, then we must have a lot of customers with way to slow systems, we had (in R77.30 and R80.10) some customers with almost all blades enabled that take around 10 to 15 minutes to install. Even on R80.30 management and R80.10/R80.20 gateways we still see times of 5 min plus.
Regards, Maarten
Highlighted
Admin
Admin

Understand the 2 minute number I quoted was the design target I was given by R&D specifically for R80.20.
We definitely want to reduce this time.

0 Kudos