Technical Tip: How to clear Firewall Policy counters

Description

This article describes how, as of FortiOS firmware version 4.00 MR2, the Firewall Policy counters can be cleared from the Web Interface (GUI) in the context menu (typically opened by right-clicking), as shown in the screenshot below:
 

Scope

• FortiOS firmware version 4.00 MR2.

• FortiOS firmware version 4.00 MR3.

• FortiOS firmware version 5.0.x.

• FortiOS firmware version 7.2.10.

• FortiOS firmware version 7.4.6.

• FortiOS firmware version 7.6.1.

Solution

Additional note: On newer versions of the FortiOS, the view of the Firewall Policy and clearing the counters will be as follows:

On FortiOS v7.2.10:

On FortiOS v7.4.6:

On FortiOS v7.6.1:

Note: The counters can also be cleared when editing the policy, as shown below:

The counters will also be cleared if the firewall policy is disabled and then enabled again:

From the CLI:

Run the following CLI commands to reset the packet count option for the firewall policy:

diagnose firewall iprope clear 100004 <Policy ID>

For example, to reset the count field for multiple policy IDs (2, 5, and 8):

diagnose firewall iprope clear 100004 2 5 8

Related articles:

• Technical Tip: Configuring a Firewall Policy which is valid only at certain days or hours by using a schedule

• Technical Tip: How to clear or reset policy counters on the firewall Policy via the CLI