shadowed rules

[Auro_Bindo]

Hello,

is there a FortiOS CLI command or an option via FortiOS WebUI that allows to detect and list the Fortigate rules which are shadowed by some precedent rules ?

we don't have FortiManager at all, only Fortigate Firewall devices with FortiOS v6.0.3

thanks in advance

[ede_pfau]

No, not to my knowledge.

To help with this, you could

- enable the policy table with unsegmented view ("global")

- enable columns "bytes", "number of hits", "last used"

and filter it for zero hits.

This is by no means the same as analyzing the policy table for shadowed policies (policies which are unreachable by logic) but it might help to find candidates.