Technical Tip: How to check which firewall policy was last used on a FortiGate

[mpandya]

Description	This article describes how to check which firewall policy was last used on a FortiGate.
Scope	FortiGate.
Solution	To determine which firewall policy was last used on a FortiGate firewall, follow these steps: Log in to the FortiGate firewall's web-based management interface. Navigate to Policy & Objects or Policy Object (the exact name may vary depending on the FortiGate version). Under Policy & Objects select, 'Firewall Policy'. Look for a column labeled 'Last Used' or 'Last Matched' in the list of firewall policies. This column should display the date and time when each policy was last used or matched. it is possible to select the column header to sort the policies by the 'Last Used' timestamp in ascending or descending order to identify the policy that was last used.