Policy Editor over slow links

[roadrunner]

Policy Editor over slow links
The GUI tries to download objects.C and all the rulebases used. If this takes longer than the timeout value (which is 25 seconds), then you will get this "server not responding" message. While not much can be done for the size of objects.C, the number of rulebases can certainly be reduced. Delete the unused rulebases from the GUI.

In the NG Smart Dashboard/Policy Editor application, make sure the "Connection Compressed" (or similar) option is enabled. You do this on the initial Policy Editor/Smart Dashboard login screen. It shows up under "More Options."

You can also adjust the GUI timeout as follows (work in 3.0 build 3072 and later):

* Unix: Set the environment variable SERVER_TIMEOUT before running fwpolicy (e.g. setenv SERVER_TIMEOUT 60 to set the timeout to 60 seconds) * Windows: Create the following registry entry as a DWORD, specifying the desired number of seconds for the timeout: HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\FireWall-1 GUI\ServerTimeout. In FireWall-1 4.1, this registry key is HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\Policy Editor\4.1\ServerTimeout.

For FireWall-1 4.1, another option is to run the GUI connection over an compressed SSH or ZeBeDee connection. ZeBeDee is nice in that the server also runs on Windows (at least more easily than SSH does). Install the SSH or ZeBeDee server on your management console, set up a port redirection on your client from TCP port 258 to 127.0.0.1 port 258 on the remote server and enable compression. In fwpolicy, etc, you will connect to 127.0.0.1. The end result is you will be connecting through an encrypted compressed communication.

-- PhoneBoy - 16 Jan 2004


FAQForm
FAQs.Class: SmartClientsFAQs
FAQs.OS:
FAQs.Version: