FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
leej
Staff
Staff
Article Id 192783
Description
This article describes how to count IP pool, DNAT and SNAT sessions respectively.

Solution
1) Count of IP pool sessions.
# diagnose firewall ippool-all stats
vdom:root owns 1 ippool(s)
name: test
type: overload
startip: 172.16.14.60
endip: 172.16.14.65
total ses: 20
tcp ses: 16
udp ses: 2
other ses: 2
2) Count of SNAT sessions for originating direction.
# diagnose sys session list | grep -c 'dir=org act=snat'33
This result equals to those of the output of 'dir=reply act=dnat'
# diagnose sys session list | grep -c 'dir=reply act=dnat'33
3) Count of DNAT sessions for originating direction.
# diagnose sys session list | grep -c 'dir=org act=dnat'1
This result equals to those of the output of 'dir=reply act=snat'
# diagnose sys session list | grep -c "dir=reply act=snat"1

Contributors