Technical Tip: How to check active sessions for particular firewall policy

To check how many active sessions are on the firewall policy, go to Policy & Objects -> Policy -> Statistics.

To check this information from the CLI, use the following commands:

diagnose sys session filter policy <policy ID>

diagnose sys session list

There is an option to check all the sessions from policy x to policy y. Use the following commands:

diagnose sys session filter policy <policy ID x> <policy ID y>

diagnose sys session list

It can be displayed in a GUI as below:

Navigate to Dashboard -> FortiView Sessions and apply the policy ID filter.

This will show all sessions that match the selected policy in detail, and will offer a summary for the total amount.