Maximum Supported Items

This applies to objects of these types - Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., Network, Host, Group, Address Range, Dynamic Object Special object type, whose IP address is not known in advance. The Security Gateway resolves the IP address of this object in real time., Wildcard Object, Security Zone, LSV Profile, Domain, Interoperable Device, VoIP Domain, Logical Server, OSE Device, Access Point Name.

To make sure the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. is responsive when you manage more than 300 Security Gateways, it is necessary to disable the three LSM Add-ons as described in sk135972 (LSMServerAddon, PAServerAddon, and PAHBServerAddon).

To ensure optimal Security Gateway responsiveness, we recommend configuring a maximum of 20,000 rules in a policy.

While the Security Gateway can support more rules than 20,000 rules, the smaller the number of rules in the installed policy, the more responsive the Security Gateway is.

To ensure optimal SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. responsiveness, we recommend configuring a maximum of 200 interfaces in SmartConsole.

If the Security Gateway object contains more interfaces, use the applicable Management API to configure interfaces. See the Check Point Management API Reference. To ensure optimal API responsiveness, we recommend configuring a maximum of 600 interfaces with API.