Fortinet white logo
Fortinet white logo

Administration Guide

Policy hit count

Policy hit count

You can use FortiManager to view FortiGate policy hit counters. When you run a policy check on a policy package or select the Find Unused Policies option from the Tools dropdown for a policy package, FortiManager shows hit count information for unused policies with zero hit count.

Note

The Find Unused Policies option is unavailable when classic dual pane is enabled. To disable classic dual pane, go to System Settings > Advanced > Advanced Settings, and set the Display Policy & Object in Classic Dual Pane option to Disable.

To view the hit count information for unused policies using the Find Unused Policies option:
  1. Ensure you are in the correct ADOM.
  2. Go to Policy & Objects > Policy Packages.
  3. In the toolbar, from the Tools dropdown, select Find Unused Policies.

    The Unused Policies window opens.

  4. In the tree menu, select the policy package, and expand the policy table of your choice in the content pane to see the hit count information for the unused policies only.
To view hit count information for unused policies in the Policy Check Report:
  1. Ensure you are in the correct ADOM.
  2. Go to Policy & Objects > Policy Packages.
  3. In the tree menu, right-click the policy package and select Policy Check.

    The Policy Check dialog opens.

  4. In the Policy Check dialog, click Perform Policy Check, and then click OK.

    Once the policy check finishes, the results are displayed in the Policy Check window.

    The Policy Check window displays the hit count information for all the policies in a policy package.

Policy hit count

Policy hit count

You can use FortiManager to view FortiGate policy hit counters. When you run a policy check on a policy package or select the Find Unused Policies option from the Tools dropdown for a policy package, FortiManager shows hit count information for unused policies with zero hit count.

Note

The Find Unused Policies option is unavailable when classic dual pane is enabled. To disable classic dual pane, go to System Settings > Advanced > Advanced Settings, and set the Display Policy & Object in Classic Dual Pane option to Disable.

To view the hit count information for unused policies using the Find Unused Policies option:
  1. Ensure you are in the correct ADOM.
  2. Go to Policy & Objects > Policy Packages.
  3. In the toolbar, from the Tools dropdown, select Find Unused Policies.

    The Unused Policies window opens.

  4. In the tree menu, select the policy package, and expand the policy table of your choice in the content pane to see the hit count information for the unused policies only.
To view hit count information for unused policies in the Policy Check Report:
  1. Ensure you are in the correct ADOM.
  2. Go to Policy & Objects > Policy Packages.
  3. In the tree menu, right-click the policy package and select Policy Check.

    The Policy Check dialog opens.

  4. In the Policy Check dialog, click Perform Policy Check, and then click OK.

    Once the policy check finishes, the results are displayed in the Policy Check window.

    The Policy Check window displays the hit count information for all the policies in a policy package.