Skip to main content
Auro_Bindo
Auro_Bindo
New Member
April 12, 2019
Question

shadowed rules

  • April 12, 2019
  • 1 reply
  • 4305 views

Hello,

is there a FortiOS CLI command or an option via FortiOS WebUI that allows to detect and list the Fortigate rules which are shadowed by some precedent rules ?

we don't have FortiManager at all, only Fortigate Firewall devices with FortiOS v6.0.3

 

thanks in advance

    1 reply

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    April 14, 2019

    No, not to my knowledge.

    To help with this, you could

    - enable the policy table with unsegmented view ("global")

    - enable columns "bytes", "number of hits", "last used"

    and filter it for zero hits.

    This is by no means the same as analyzing the policy table for shadowed policies (policies which are unreachable by logic) but it might help to find candidates.

    Terms & ConditionsAccessibility statement