[FW1] Will extra disabled rules hurt performance?

["Derek J. Lambert" <dlambert@FW1-NOSPAMparcar.com>]

In order to visually separate different groups of rules in the policy editor
I've been inserting a default rule (any, any, any, drop), disabling it, and then
hiding it. This gives me a nice line across the policy. My original though was
when the policy is compiled those rules would not end up in it, so there would
be no performance hit on packet inspection. I'm not really worried if it takes
an extra 2 seconds (or whatever) to fetch the policy. Am I making a correct
assumption? Is there a better way to do this? Thanks.

Derek J. Lambert, MCSE, MCP+I, CCA, A+
MIS Manager
Columbia ParCar Corp.




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================