Technical Tip: Clearing hit count for SD-WAN rules

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 227304

Description

This article describes how to clear hit counters for SD-WAN rules via CLI.

Scope

FortiGate, SD-WAN.

Solution

Run the command 'diag firewall proute list'.
Look for the relevant SD-WAN rule:

id=2130706435(0x7f000003) vwl_service=3(test) <----- 0x7f000003 is the Hex ID for this SD-WAN rule.

source(1): 0.0.0.0-255.255.255.255
destination(1): 0.0.0.0-255.255.255.255
hit_count=179316 last_used=2022-10-20 13:04:57

Run the following command:

diagnose firewall proute clear 0x7f000003
Result:

id=2130706435(0x7f000003) vwl_service=3(test)
source(1): 0.0.0.0-255.255.255.255
destination(1): 0.0.0.0-255.255.255.255
hit_count=0 last_used=2022-10-20 13:05:58

3545

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Clearing hit count for SD-WAN rules

You are leaving our website