Who rated this post

Hi,

The 20 minutes duration and example you mentioned are of course not an acceptable timeframe. I believe there can be multiple reasons for this. In environments with the rule sets you specified, such durations are not observed. When such situations occur, we address them by applying different solutions to bring the timing to a more acceptable level. This can sometimes involve optimization of the rule set, performing an action on the gateway where the policy is being installed, adjusting buffer limits of services such as CPM, FWM etc. on the management server or making adjustments to the management architecture. However a 20 minutes policy installation on a single gateway is not considered a normal scenario.

If you wish, you can work with Check Point PS or TAC team.

Note: Please check you total GW objects in MDS for limitation;

https://www.checkpoint.com/downloads/products/smart-1-6000-security-management-datasheet.pdf

Thank you