Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Security Community Blog

What to do when it takes a long time for Firewall Policy Overview page to appear when running with more than 500 groups in SEPM

Created: 16 Jun 2009 • 1 comment
Kedar Mohile's picture
+1 1 Vote
Login to vote

Takes a long time for Firewall Policy Overview page to appear when running with more than 500 groups in SEP Manager...

For more than 500 groups, it takes 1.5 minutes to display the Firewall Policy Overview page

If you click the Add a Firewall Policy command, it can take up to 1.5 minutes for the Firewall Policy Overview page to appear. This occurs if the management server contains 500 or more groups. The problem occurs because it takes time for the Overview page displays all the groups and locations that the existing firewall policies are assigned to.

This happens due to the "locationCounting" settings enabled which is used to count and display the same for the user every time the page is attempted to open. When you have a higher number lets say more then 500 it takes ~1.5 mins to count and display the same.

To work around this issue, perform the following steps:

Close all instances of the Symantec Endpoint Protection Manager Console.
Open the file %temp%/sesm.xml
Locate the following line: <login locationCounting="true" option="more" vistaWarn="false" />
Change the "locationCounting" attribute from "true" to "false" and save the file.
Restart the console.
In the console, click Policies > Firewall > Add a Firewall Policy.
On the Firewall Policy Overview page, under "Groups Using This Policy," the text "The group list is currently hidden" appears instead of the groups. This is is the effect of the change we performed and is expected and normal.

Reversing the changes would restore the Firewall Policy Overview page, under "Groups Using This Policy,"