Technical Note: How to check and reset the policy counter field.

[dsharma]

Description
This article provides the CLI commands that are available on FortiOS 6.0 in order to clear statistics per policy

Solution

GUI Method:

Right-click on the policy(under Bytes filter) and use the "Clear counters" action.

CLI Method:
To show the statistics of policy <policy_id>:

# diag firewall iprope show 100004 <policy_id>

For example:

# diag firewall iprope show 100004 2
 idx=2 pkts/bytes=144967/135758174 asic_pkts/asic_bytes=0/0 flag=0x0 hit count:663

To clear the statistics for this policy:

# diag firewall iprope clear 100004 2

# diag firewall iprope show 100004 2
 idx=2 pkts/bytes=17/1814 asic_pkts/asic_bytes=0/0 flag=0x0 hit count:1