Technical Tip: Clearing hit count for SD-WAN rules

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 227304

Description

This article describes how to clear hit counters for SD-WAN rules via CLI.

Scope

FortiGate, SD-WAN.

Solution

1) Run the command '# diag firewall proute list'.

2) Look for the relevant SD-WAN rule:

id=2130706435(0x7f000003) vwl_service=3(test)
source(1): 0.0.0.0-255.255.255.255
destination(1): 0.0.0.0-255.255.255.255
hit_count=179316 last_used=2022-10-20 13:04:57 <----- 2130706435 is the ID for this SD-WAN rule.

3) Run the following command:

# diagnose firewall proute clear 2130706435

4) Result:

id=2130706435(0x7f000003) vwl_service=3(test)
source(1): 0.0.0.0-255.255.255.255
destination(1): 0.0.0.0-255.255.255.255
hit_count=0 last_used=2022-10-20 13:05:58

1572

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.