Summary
When you have too many rules enabled on the assigned Deep Security policy, the following event may show on the Deep Security Manager (DSM) console:
Agent configuration package too large
Details
The rules are actually applied, but once the alert message appears, the agent will not receive the newly assigned rules.
There is a configuration limit of 20MB in Windows 32-bit platform because it has smaller kernel memory available. The issue occurs due to this configuration limit. Moreover, when the file size exceeds 2GB, the error message also appears.
To resolve the issue, trim down the Intrusion Prevention rules strictly to Recommended for Assignment only.
You can also disable the alert message using the procedure below:
- Log in to the DSM console.
- Double-click the virtual machine (VM) that has the alert message.
- Go to Settings > Network Engine > Advanced Network Engine Settings.
- Set the value of "Generate an Alert when Agent configuration package exceeds maximum size" to No.
- Save the changes.
