I like to generate a weekly report that includes any active FortiGate-Policy filtered by some keywords in their name.
I'm able to query them from $log-traffic, but obviously this gets only the policies with traffic.
Is there a table that includes the configured policies regardless of them having traffic or not?
as you already noticed, in FAZ you would have logs and info about the firewall policies that have either logging all sessions or security profiles matches.
you could do a diff between the policy id/name from FAZ that are being noticed there and the ones actually configured on the FGT.
in the GUI you would also enable the column Hit Count and see the ones with no match/0 hits or Last Used to see when they were last used/matched.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
