Skip to main content
albaker1
New Member
April 6, 2017
Question

Is there a way to look at the hit count on the firewall rules?

  • April 6, 2017
  • 1 reply
  • 15505 views

We have some outdated rules on our 200D firewall, but we'd like to go through and see if there is anything else we can disable. How do look at the hit count on the rules to determine if they are likely still in use? Thanks

    1 reply

    YvesCa
    New Member
    April 6, 2017

    Hello

     

    You can add the bytes column !

    If it is at 0, the rule is doesn't use.

     

     

    albaker1
    albaker1Author
    New Member
    April 6, 2017

    Thank you for your reply. We're good now - thanks!

    emnoc
    New Member
    April 6, 2017

    from the cli it's even  easier,

     

    diagnose firewall iprope  show   00100004 1 2 3 4

     

    Will show the hits or lack of hits for fwpolicy 1 2 3 4 

     

    To clear  all policyids

     

    diagnose firewall iprope  clear 00100004  0-4294967294

     

    or

     

    a set of policyids

     

    diagnose firewall iprope  clear 00100004  1 2 3 4 5