Policy used report

[moby]

Hi All,

I would like to be able to run a report on the Fortianalyzer to display if the firewall policies have been used or not over a period of time. Ideally this would give the last used date but it would also be fine if the report listed unused policies only or a report showing the policy ID of all polices which have recorded traffic. Does anyone know if this is possible and if so how to do this.

Please note, I know you can do this from the Fortigate GUI  - but there are a lot of polices and a report would be better.

Thanks, Moby.

[MikePruett]

I know in 5.6 it is assisting with finding policies that either haven't been hit at all or haven't been hit in a decent amount of time. Really going to assist with firewall cleanup processes.