Description | This article describes what to do when FortiManager is not reflecting policy hitcounts. |
Scope | FortiManager. |
Solution |
FortiGate is showing hit counts for a firewall policy:
However, the hit count is not synced with FortiManager even when it is refreshed:
This is due to the difference in policy UUID between FortiGate and FortiManager:
Policy UUID on FortiGate: 244e8db8-4287-51ef-72f7-a18c9292e0fc.
Policy UUID on FMG: 244e8db8-4287-51ef-72f7-a18c9292e0fd.
FortiManager maps policy-related information retrieved from FortiGate such as hit count and bytes to policies with corresponding UUIDs. To make sure hit count is synchronized, policy UUIDs must be synchronized as well by either installing them from FortiManager or importing them from FortiGate.
Related article: Troubleshooting Tip: FortiGate is Out-of-sync in the Device Manager |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.