Technical Tip: Security Rating shows 'Configuration has too many entries to check'

When running the Security Rating, the following message appears:

The error message is an intended limitation to prevent high memory consumption by
configurations with large object counts, and this defeats the purpose of the Security Rating for enterprise users who will have larger configurations.

This usually happens on devices with very large configurations, such as many firewall policies, address objects, and groups. When the configuration becomes too big, the Security Rating engine cannot process all entries.

As a result, some checks are skipped, and the device is marked as exempt, preventing a full security assessment.

Tip: Regularly cleaning up unused objects and old policies can help improve Security Rating results.

For more information, reach out to Fortinet TAC by opening a Support case.

Related article: 

Technical Tip: Security Rating entries shown as Unlicensed