topic Re: NAT policy rules hit count not visible in .csv export file in Firewall and Security Management

NAT policy rules hit count not visible in .csv export file

the_rock — Thu, 23 Feb 2023 16:59:43 GMT

Hey guys,

I was doing some R81.20 lab testing yesterday and its great to see that NAT rules hit count now works consistently, but weird thing is when I export the NAT rules in csv format, I dont see column for hit count.

If I do same for regular rules, its there and I see the actual hit count, like you see it in smart console. I did same for urlf+appc and content awareness ordered layer rules and hit count shows in csv file. I have a feeling maybe this is by design, but not 100% sure. Anyway, not a big deal, just curious : - )

Thanks as always for the help 🙌

Cheers,

Andy

Re: NAT policy rules hit count not visible in .csv export file

PhoneBoy — Mon, 27 Feb 2023 18:24:29 GMT

@Tomer_Noy does the export for NAT rules via SmartConsole include hit count information?

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Mon, 27 Feb 2023 18:25:39 GMT

If not, this is my unofficial RFE sumbission request ; - )

Andy

Re: NAT policy rules hit count not visible in .csv export file

Youssef_Obeidal — Tue, 28 Feb 2023 13:16:40 GMT

Hi,

We will look into it for the next version and try to backport it to JHF of recent versions

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Tue, 28 Feb 2023 13:58:13 GMT

I had customer ask me about it, but I told them since their S1C instance will be upgraded soon to R81.20, at least they will be able to consistently see NAT rules hit count in the dashboard, so thats better than not see it at all : - ). We were hoping with everything being on R81.10 it would work as well, but sadly not...if they are lucky, works one out of 30 policy installs.

Re: NAT policy rules hit count not visible in .csv export file

rajes27 — Tue, 22 Aug 2023 03:53:10 GMT

Hi,

Is there any update on this or way to export NAT rules with hit count details. I even tried with mgmt api, looks like the hit count details are not present for NAT rules like in access rules. Please help / share if there is any way.

Re: NAT policy rules hit count not visible in .csv export file

Youssef_Obeidal — Tue, 22 Aug 2023 07:42:07 GMT

Hi,

We are working to add a NAT hitcount to the Management API and to the export functionality in SmartConsole.

We will deliver it to the Jumbo branch as well once ready.

Re: NAT policy rules hit count not visible in .csv export file

Pedro_Madeira — Wed, 31 Jul 2024 10:11:28 GMT

Hello @Youssef_Obeidal

Do you know if this was already integrated or near integration?

A customer of ours needs this functionality of exporting the NAT rules with hit counts.

Thank you,

Pedro Madeira

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Wed, 31 Jul 2024 12:43:21 GMT

@Pedro_Madeira Just for the context, basic csv export shows hit count fine.

Andy

Re: NAT policy rules hit count not visible in .csv export file

Pedro_Madeira — Tue, 06 Aug 2024 13:46:25 GMT

Hello,

Thanks for your reply.

I just tested in another customer's R81.20 to export the access control and NAT rule base but I'm still missing hits.

I might be missing some kind of option to include it. The columns I'm getting are:

No.,Type,Name,Original Source,Original Destination,Original Services,Translated Source,Translated Destination,Translated Services,Install On,Comments

Any pointers?

Thank you once again.

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Tue, 06 Aug 2024 13:56:28 GMT

Did you make sure 100% hits column is enabled?

Andy

Re: NAT policy rules hit count not visible in .csv export file

Pedro_Madeira — Tue, 06 Aug 2024 14:04:02 GMT

Yes. I have the columns enabled.

Do you think I need a more recent version than JHFA T65?

Which version and JHFA are you using to export?

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Tue, 06 Aug 2024 14:05:48 GMT

Im on jumbo 76, but it worked even when I was on way lower jumbo, so thats probably not an issue. Maybe try reboot the mgmt to see if it makes any difference.

Andy

Re: NAT policy rules hit count not visible in .csv export file

Pedro_Madeira — Tue, 06 Aug 2024 15:00:21 GMT

I found out what the problem was. I have to have the hits column enabled everywhere for it to be exported, so in Access Control Rules layer, URLF/AppCtrl layer and NAT. If it's not enabled in each one, the export doesn't come out with hits.

I have it working now. Thanks for your tips buddy. You Rock 🙂

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Tue, 06 Aug 2024 15:04:56 GMT

Thats right my friend. Glad we can help 🙂

Best,

Andy

Re: NAT policy rules hit count not visible in .csv export file

AOBELAR — Mon, 23 Dec 2024 22:55:34 GMT

Good afternoon! I have the same problem that you had, but in my case I have the HIT column active in all the layers and even so the excel does not export with the hits.

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Fri, 27 Dec 2024 18:32:12 GMT

What version of mgmt/gw?

Andy

Re: NAT policy rules hit count not visible in .csv export file

AOBELAR — Fri, 27 Dec 2024 19:16:19 GMT

Hello good! How's it going? thanks for answering. The MGM 81.20 and GW 81.10

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Fri, 27 Dec 2024 19:19:25 GMT

I cant sadly speak for R81.10, as I never tested it in that version, but in R81.20, both mgmt and gateway, works fine. Let me try in the lab shortly, just to confirm.

Andy

Re: NAT policy rules hit count not visible in .csv export file

the_rock — Fri, 27 Dec 2024 19:33:40 GMT

@AOBELAR I would open TAC case to check this, since I have R81.20 jumbo 92 in the lab (mgmt and gateways) and hits on NAT rules does NOT show up when you export nat rules (but it does in nat policy), but works on every other layer. I even unchecked hits, push policy, same thing.

Andy