> Source: [sk180896](https://support.checkpoint.com/results/sk/sk180896)

# sk180896 - Slow policy installation which takes around 10 minutes 

| Property | Value |
|----------|-------|
| Solution ID | sk180896 |
| Date Created | 2023-04-21 |
| Last Modified | 2025-04-30 |
| Technical Level | General |
| Products | Multi-Domain Security Management Server |
| Versions | R81 (EOS), R81.10 (EOS), R81.20 |
| OS | Gaia |

## Symptoms

- * Slow policy installation. Gets stuck at 20%.

* Debug output in *$MDS_FWDIR/log/cpm.elg* shows:

  \[date, time\] DEBUG com.checkpoint.management.appi.internal.AccessPolicyConverter.convert_aroundBody0:220 \[unboundedTaskExecutor-4\]: Starting to convert inline layer 'TO-FW-DC', name: {})  

  \[date, time\] DEBUG com.checkpoint.management.access.dle.beans.LayersManager.extendSearchMatchInfo:977 \[unboundedTaskExecutor-4\]: LayersManager.extendSearchMatchInfo took 2846   

  \[date, time\] DEBUG com.checkpoint.management.appi.internal.AccessPolicyConverter.convert_aroundBody0:269 \[unboundedTaskExecutor-4\]: get install target reference (took 3095 millis)  

  \[date, time\] DEBUG com.checkpoint.management.appi.internal.AccessPolicyConverter.convert_aroundBody0:220 \[unboundedTaskExecutor-4\]: Starting to convert inline layer 'From-172.18.0.0', name: {})  

  \[date, time\] DEBUG com.checkpoint.management.access.dle.beans.LayersManager.extendSearchMatchInfo:977 \[unboundedTaskExecutor-4\]: LayersManager.extendSearchMatchInfo took 2485  

  \[date, time\] DEBUG com.checkpoint.management.appi.internal.AccessPolicyConverter.convert_aroundBody0:269 \[unboundedTaskExecutor-4\]: get install target reference (took 2765 millis)

## Cause

A large number of inline layers, that causes repeated reading of the Rule Base per inline layer.

## Solution

This problem was fixed. The fix is included starting from:

* [Check Point R82](https://support.checkpoint.com/results/sk/sk181127)
* [Check Point R81.20 JHF 26](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Take_26.htm?tocpath=Previously%20Released%20Takes%7C_____16)

Check Point recommends to always upgrade to the [Recommended version](https://support.checkpoint.com/results/sk/sk95746) ([Multi-Domain Security Management Server](https://support.checkpoint.com/product/166)).

If you choose not to upgrade, [contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for your version.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Security Gateway / each Cluster Member involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content