Web Gateway 7.1.5 Product Guide - McAfee

Monitoring
Performance measurement 8
Using events in rules to measure processing time for rule sets
To measure the time the rule engine consumes for processing a rule set you can use the events that
control the internal watch on the appliance in appropriate rules.
A rule that uses, for example, the Stopwatch.Start event to start measuring processing time for the
URL Filtering rule set could look as follows:
Note: The example shows approximately how the rule appears on the user interface.
Name
Start stopwatch for rule set
Criteria Action Event
Always –> Continue – Stopwatch.Start (“URLFiltering”)
In a similar way, you can use the events for stopping and resetting the internal watch in other rules.
To measure the time consumed for processing the rule set, you can place a rule containing the starting
event at the beginning of the rule set and one with the stopping event at the end.
However, if you have rules in a rule set that can execute a Stop Rule Set, Stop Cycle, or Block action,
you need to place the starting rule at the beginning of the rule set and a stopping event into each rule
that executes one of the mentioned actions.
A rule with an event to stop the internal watch inserted would look as follows:
Note: The example shows approximately how the rule appears on the user interface.
Name
Allow URLs in URL Whitelist
Criteria Action Event
URL matches in URL Whitelist –> Stop Rule Set – Stopwatch.Stop (“URLFiltering”)
When this rule is applied, it stops processing the URL Filtering rule set because the URL that a user
requested access for has been found to be on the list of allowed URLs. The stopwatch event must
therefore be inserted into this rule.
If it were inserted into a separate rule at the end of the rule set, this rule would never be processed
because the whitelisting rule had stopped processing of the rule set before all its rules were processed.
In this case, the event that stops the internal watch would never be executed.
McAfee Web Gateway 7.1.5 Product Guide 299