central-policy polling intervals are very erratic

book

Article ID: 221941

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

They're seeing major inconsistencies in the time-keeping of central-policy polling on SGs. For example, when the interval in the central policy pooling is configured to 60(min), the actual interval is 61. This usually happens in both Hardware appliances and Virtual appliances such as SG-VA.

Example Hardware appliance SG-S400 (always 61 min interval)
2021-07-26 19:25:57+09:00JST  "New central policy file has been downloaded and installed (subscription)"
2021-07-26 20:26:57+09:00JST  "New central policy file has been downloaded and installed (subscription)"
2021-07-26 21:27:56+09:00JST  "New central policy file has been downloaded and installed (subscription)"

Another device SG-VA C2 (always 60 min interval)
2021-07-26 22:00:57+09:00JST  "New central policy file has been downloaded and installed (subscription)"
2021-07-26 23:00:58+09:00JST  "New central policy file has been downloaded and installed (subscription)"
2021-07-27 00:01:00+09:00JST  "New central policy file has been downloaded and installed (subscription)"

 

Cause

This is a limitation in the SG for now. The timer skew due to load on the device.

Environment

All ProxySG version.

Resolution

No resolution is provided. Only a thing is to use manual pooling with CLI. 
#(config)policy poll-now

Additional Information

This probably will fix in the future release.