Modifying Policy Installation timeouts

Posted on July 11, 2013 by otrdemo — Leave a comment

Modifying Policy Installation timeouts For large Policy base install, it may be necessary to increase the following timeout:

Increasing timeout between SmartConsole and Security Management server

Perform the following on the Security Management server machine:

Run regedit and locate the following path:HKEY_CURRENT_USER\Software\CheckPoint\Management Clients\<version>\CheckPoint SmartDashboard
Create a value named “ServerTimeout” of type DWORD, and assign its data an appropriate value in milliseconds.
Run cpstop;cpstart
Install the policy

Increasing the timeout between Security Management server and the Security Gateway

Stop the Security Management server. Run cpstop
Edit the $FWDIR/conf/objects_5_0.C file or use GuiDBedit.
Search for the property ‘install_policy_timeout‘ and change its value to 1000 as shown below:
:install_policy_timeout (1000)Note: The number is in seconds and the default timeout is 600 seconds, increase as necessary.Path in GuiDGEdit:
Global Properties -> firewall_properties -> install_policy_timeout

4. Save the file and start the Security Management server (‘cpstart‘)

5. Install the policy.

fwknowledge.wordpress.com