Layer7 API Management

  • 1.  Performance in "CA Policy Manager" tool depends on user ?

    Posted Jan 17, 2017 05:30 AM

    Hi

     

    I am a user for 7 months on the tool "Policy Manager" of the CA API Gateway, first in version 9.0 then 9.1 (currently)

    We had problems of slowness on the Policy Manager, using IDP accounts on our Active Directory.
    The first reflex is to think that is was related to our AD. But not !
    Now we working with accounts "Internal user". And the slowness come back gradually !

    Same tasks are replay by 3 users, on the same platform and the same instance of Policy Manager :

     

    1) My account (internal user) take:

    - 40 Sec to connect/disconnect

    - 15-30 Sec to task "Revision History" of a policy

    - 15-30 Sec to open/edit a policy

     

    2) A new account (internal user), with the same Role of my account, take:

    - 15 Sec to connect/disconnect

    - 4 Sec to task "Revision History" of a policy

    - 2 Sec to open/edit the same policy

     

    3) "Admin" account is equivalent of a new account.

     

    There is a relation between history of user and performance ?

     

    Please help if we can make it run faster foreach user !

     

    Regards

    David



  • 2.  Re: Performance in "CA Policy Manager" tool depends on user ?

    Posted Jan 20, 2017 10:13 AM

    Hi David,

     

    I had a similar problem. In my case the user I was accessing the policy manager had many roles, try to specify a single role (administrator, for example), when I removed all user functions any action in the policy manager became instant.

     

    Regards

     

    Matheus Isquierdo



  • 3.  Re: Performance in "CA Policy Manager" tool depends on user ?

    Posted Jan 20, 2017 12:22 PM

    Hi Matheus

    Thank you for your feedback.
    What does "functions" mean to you?
    At the user level (Tasks>Users and Authentification > Search Identity Provider), I select my user
    and in "user Properties" window, I see the tabs General | Roles | Groups | Certificate | SSH
    If I remove all the Roles, my user will have no more action possible.

    What should I do ?

    Regards
    David


  • 4.  Re: Performance in "CA Policy Manager" tool depends on user ?
    Best Answer

    Posted Jan 20, 2017 12:32 PM

    I dont recomend add all roles,In your first scenario, (Your Account 1) My account (internal user)) verify how many roles you have?

     

    If you have many roles, try to leave "Administrator" only, I had a similar problem to yours, and my user had all the functions and, I left admin only and the response time fell absurdly.



  • 5.  Re: Performance in "CA Policy Manager" tool depends on user ?

    Posted Jan 20, 2017 12:33 PM

    Sorry, I wrote "functions" and correct was "roles".



  • 6.  Re: Performance in "CA Policy Manager" tool depends on user ?

    Posted Jan 25, 2017 03:20 AM

    Hi Matheus

     

    Thanks a lot !

     

    I actually removed all roles from my account, except for one (custom role), and performance improved.
    The performances remain very low (in term UX), but clearly better

    Note: the deleted roles were system "Manage <folder>"

     

    Regards

    David



  • 7.  Re: Performance in "CA Policy Manager" tool depends on user ?

    Posted Jan 25, 2017 03:23 AM

    Removed roles have been added automatically by GW, cause I have the "owner" of folders and policies contained in it