Description
This article describes the CLI commands that are available on FortiOS 3.0 and 4.0 in order to clear statistics per policy.
Solution
To show the statistics of policy <policy_id>:
diag firewall iprope show 100004 <policy_id>
For example:
diag firewall iprope show 100004 2
idx=2 pkts/bytes=1732/262451
To clear the statistics for this policy:
diag firewall iprope clear 100004 2
diag firewall iprope show 100004 2
idx=2 pkts/bytes=0/0
Using the new GUI that was introduced in FortiOS 4.0 MR2, it is possible to right-click on the policy and use the 'Clear counters' action instead.
iPrope is organized in groups (according to function). These groups are identified by 'group number'. For example: 100004 is the group number for 'all forward policies'.
0010000a is the group number for multicast polices. For example:
diag firewall iprope show 0010000a 1
