I dentify unused Policies

[thedude78]

Having recently inherited a Fortigate 1500D running FortiOS 5.2.5 I am looking for a best practice for reporting on firewall policies that are "unused".  Basically any policy that has had 0 hits in say the last 30 days.  We are using forianalyzer 5.4 as well and are able to report on policies that DO get used, but my guess is that unused policies will never show in the logs so Fortianalyzer doesn't know they exist.  I am not currently using Disk Based logging on the fortigate and perhap this will be required to generate the report I am looking for...  Let me know if anyone has any ideas.

Thanks

[SteveG]

There's an excellent feature built in to the Fortigates that shows you last time a rule/policy was used. Simply enable the 'Last Used' column in the Policy View (where to create/edit rules).