Is there a way to look at the hit count on the firewall rules?

[allynb]

We have some outdated rules on our 200D firewall, but we'd like to go through and see if there is anything else we can disable. How do look at the hit count on the rules to determine if they are likely still in use? Thanks

[YvesCa]

Hello

You can add the bytes column !

If it is at 0, the rule is doesn't use.

[allynb]

Thank you for your reply. We're good now - thanks!

[emnoc]

from the cli it's even  easier,

diagnose firewall iprope  show   00100004 1 2 3 4

Will show the hits or lack of hits for fwpolicy 1 2 3 4 

To clear  all policyids

diagnose firewall iprope  clear 00100004  0-4294967294

or

a set of policyids

diagnose firewall iprope  clear 00100004  1 2 3 4 5