Skip to main content
ICT_Putte
Explorer
October 20, 2022
Solved

how to reset hit counts for SD-WAN rules?

  • October 20, 2022
  • 3 replies
  • 5091 views

We are using a Fortigate 100F with firmware 7.2.2. 

 

Is there a way to reset the hit counts for specific SD-WAN rules? 

 

After some searching in the guides and the forum I found info to reset the hit counts for the policy rules but uptil now no luck in resetting the hit counts for the SD-WAN rules.

 

Can some of the guru's here help me or point me in the right direction? 

 

Thanks in advance

Best answer by aionescu

Hi @ICT_Putte ,

 

Welcome to the community.

Can you, please, try  diag firewall proute list  and then   clear hit_count using the policy route ID from ‘proute list’ ?

 

3 replies

aionescu
Staff
aionescuAnswer
Staff
October 20, 2022

Hi @ICT_Putte ,

 

Welcome to the community.

Can you, please, try  diag firewall proute list  and then   clear hit_count using the policy route ID from ‘proute list’ ?

 

sagha
Staff
Staff
October 20, 2022

Hi @ICT_Putte 

 

Here are the steps: 

 

1. Run the command 'diag firewall proute list '

 

2. Look for the relevant sdwan rule:

 

id=2130706435(0x7f000003) vwl_service=3(test)
source(1): 0.0.0.0-255.255.255.255
destination(1): 0.0.0.0-255.255.255.255
hit_count=179316 last_used=2022-10-20 13:04:57

 

3. Run the following command: 

2130706435 is id for this sdwan rule

 

diagnose firewall proute clear 2130706435

 

4. Result: 

 

id=2130706435(0x7f000003) vwl_service=3(test)
source(1): 0.0.0.0-255.255.255.255
destination(1): 0.0.0.0-255.255.255.255
hit_count=0 last_used=2022-10-20 13:05:58

 

Hope this helps. 

 

Thank you. 

Shahan

ICT_Putte
ICT_PutteAuthor
Explorer
October 20, 2022

Hi @aionescu and @sagha 

 

Thanks for the info. With it I managed to clear the hit count.

 

I noticed some strange behaviour thou (maybe a bug in the firmware version I'm using?):

 

When I used the command with a specific id of a sdwan rule it didn't work.

'diag firewall proute clear <id nummer> ' didn't gave an error but it also didn't clean the hit count.

If I gave the same command without the id nummer it cleared all the hitcounts of all the rules (as expected).

 

The firmware I'm using v7.2.2 build 1255.

 

With kind regards.

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!