Optimizing policy engine performance

Try to avoid analysis of incoming traffic. If incoming traffic analysis is a must, try to limit it to specific domains.
Never scan all networks; establish limits.
Check the top policies to see if there are:
- Any false positives
- Unwanted or unneeded policies
If possible, make sure no spam SMTP mail is undergoing analysis.