Improvement request - Still updating a firewall requires so much time

Luk,

10s for me to update a rule.  10s to delete a rule.

I'm on an XG135 with Software build and home license.  I also have 1 rule in firewall tab (plus default drop rule).

Thanks,

John

Hi Luk, I tested this with a stopwatch [8-|] . I have a 4GB vm with 2vcpus and memory utilization to 80%. I have web proxy with categorization and av blocking. Also running Application categorization with allow all for pretty graphs (not blocking any apps). I don't have any DPI rules. I am also not using IPS.

Average time for a rule update is 10.85 seconds. I did the test multiple times with different rules and it is always 10.5 plus seconds. I usually don't play with the firewall once its setup so not a problem after initial setup. I am also getting some inconsistent results with multiple NAT rules as the firewall seems to get confused if you turn on and off too many rules but that is not the topic here.

Are you running everything on your firewall? Maybe the processor is overwhelmed with everything running? Not saying they don't need to fix this, just wondering why you are getting almost twice the time that I am getting on firewall rule update.

Regards

10s? This is a "huge" amount of time. Updating a firewall rule should not require more than 4/5 seconds.

I think the gui waits for the backend to finish before it says update successful. Its the same behavior if you turn on a service that is not running. Turn off IPS and then turn it back on, you will have to wait forever before the service started message comes up.

I agree that overall gui is too slow from control center to firewall rules. Was v17 like this? I don't quite remember how the older v16.xx versions acted on rule updates but from memory, they were still slow compared to other firewalls

Billybob said:

...they were still slow compared to other firewalls

That's the problem. I lost already 2 customers and 5 are waiting for UI responsiveness in v18, otherwise they will move away. Same behaviour for logging. There is a certain lag between what's happening and log itself (I do not want to say nothing about the logging quality via UI).

Regards

I am currently working with CM as a GUI replacement and it is quite fast. 

Did you try this approach? 

No Lucar. Small customers do not need CM. They use XG interface.

Is CM going to be the new UI even for XG in 18 or 18.5?

Regards

LuCar Toni, 

can you ask to some dev like Rana Sharma or someone else to look at this issue?

Thanks

The basic question is: Is it slower than V17? 

No!

The title of the thread is clear! In v18 no improvements have been done for speed-up Firewall editing UI.