Commit Error

[SenthilM]

While committing the policy we are getting the below error.

Error reading signature DFA data
failed to handle CONFIG_UPDATE_START

[jdelio]

Some Data Filtering search patterns can consume too much of the available CTD memory.

When the CTD memory allocation becomes too big (due to some Data Filtering Objects) it can cause these commit errors (Config_update_start).

It is recommended that you delete some of the Data Filtering objects, and try again. 

You can also monitor the CTD usage with the command

"show system setting ctd state"

Here is an example of the command output before and after deleting some Data Filtering objects..

Before
=====
Content Allocator Usage : 320384 KB (52% of 608128 KB)

Current CTD Version : 1 (idx 1, content 8307-6263)
TDB Virus(valid) Custom(valid) Autogen(valid)
CTD Usage : 276352 KB (Actual 275674 KB) <--- CTD before with Data Filtering
Virus Allocator Usage : 26112 KB (Actual 25668 KB)
Custom Allocator Usage : 128 KB (Actual 49 KB)
Autogen Allocator Usage : 1280 KB (Actual 1159 KB)

No Alternate CTD

After:
====

Content Allocator Usage : 496256 KB (81% of 608128 KB)

Current CTD Version : 2 (idx 0, content 8307-6263)
TDB Virus(valid) Custom(valid) Autogen(valid)
CTD Usage : 175872 KB (Actual 175400 KB) <--- CTD after without Data Filtering
Virus Allocator Usage : 26112 KB (Actual 25668 KB)
Custom Allocator Usage : 128 KB (Actual 49 KB)
Autogen Allocator Usage : 1280 KB (Actual 1159 KB)

Alternate CTD Version : 1 (idx 1, content 8307-6263)
TDB Virus(valid) Custom(valid) Autogen(valid)
CTD Usage : 276352 KB (Actual 275674 KB)

I hope this helps.

[SenthilM · Accepted solution]

It's done. I have restarted the firewall and tried it's got committed successfully. 

Thank  you. 

[jdelio]

That is great to hear, so glad that helped!!

[Yuhaoze]

Hi the CTD memory allocation becomes too big,How to solve it？Is it convenient to tell the command？

Thanks!