Skip to main content
sagha
Staff
Staff
October 20, 2022

Technical Tip: Clearing hit count for SD-WAN rules

  • October 20, 2022
  • 0 replies
  • 3789 views
Description This article describes how to clear hit counters for SD-WAN rules via CLI.
Scope FortiGate, SD-WAN.
Solution
  1. Run the command 'diag firewall proute list'.

  2. Look for the relevant SD-WAN rule:

 

id=2130706435(0x7f000003vwl_service=3(test) <----- 0x7f000003 is the Hex ID for this SD-WAN rule.

source(1): 0.0.0.0-255.255.255.255
destination(1): 0.0.0.0-255.255.255.255
hit_count=179316 last_used=2022-10-20 13:04:57

 

  1. Run the following command: 

    diagnose firewall proute clear 0x7f000003

     

  2. Result: 

    id=2130706435(0x7f000003vwl_service=3(test)
    source(1): 0.0.0.0-255.255.255.255
    destination(1): 0.0.0.0-255.255.255.255
    hit_count=0 last_used=2022-10-20 13:05:58