Centralized Web Filtering Statistics
Instead of individual counters, this version uses a centralized set of counters for the combined results for Explicit Proxy, Flow mode, and Proxy mode web filtering.
The CLI shows the global cumulative IPS engine daemon/workers statistics. For Proxy mode or Flow mode web filtering, you can now use these counters to check all the Proxy or Flow daemons/workers statistics. You don't have to check the statistics for each daemon/worker or check the statistics from the URL filter daemon (FortiGuard rating daemon).
You must use the CLI to use this feature.
Use the Flow mode web filtering global statistics counter for the web filtering statistics of all accessible VDOMs for an IPS engine.
To display global Flow URL filter statistics counter:
(global)# diag test app ipsmonitor 29 Global URLF states: request: 116 response: 116 pending: 1 request error: 0 response timeout: 0 blocked: 24 allowed: 92
To reset the global Flow URL filter statistics counter:
(global)# diag test app ipsmonitor 30
Proxy mode web filter
The Proxy mode web filter counter is not new. This version adds the results from Flow mode.
Use the Proxy mode web filtering statistics counter for all the web filtering statistics of the WAD daemon, including transparent proxy policy and explicit webproxy policy scenarios. This is global and per-VDOM.
To use Proxy mode web filtering:
(vdom)# diag wad stats filter list ...... filtering of all accessible vdoms <-- under VDOM dlp = 0 content-type = 0 urls: examined = 181 allowed = 16 blocked = 1 logged = 95 overridden = 6
(global)# diag wad stats filter list ...... filtering of all accessible vdoms <-- under global dlp = 0 content-type = 0 urls: examined = 181 allowed = 16 blocked = 1 logged = 95 overridden = 6
To define global or per-VDOM output statistics:
(global)# diagnose wad filter vd root <-- filter-out output for vdom root (global)# diagnose wad stats filter list filtering of vdom root <-- statistics for VDOM root (under global) dlp = 0 content-type = 0 urls: examined = 0 allowed = 0 blocked = 0 logged = 0 overridden = 0