topic Re: Top rule hit missing... in Firewall and Security Management

Top rule hit missing...

Arthur_DENIS1 — Wed, 04 Sep 2019 07:48:46 GMT

Hi,

I would like perform a policy optimisation, and usually use the cpstat blades command to show the top rule hits.

However, not working for firewall in R80.20 with my customer... (see below an output)

Any idea about this "issue" ?

Thx !

[Expert@ FW:0]# cpstat blades

Packets accepted : 99216054956

Packets dropped : 42173311

Peak number of connections: 69022

Number of connections: 55147

Top Rule Hits

-----------------------

|rule index|rule count|

-----------------------

[Expert@ FW:0]#

Re: Top rule hit missing...

G_W_Albrecht — Wed, 04 Sep 2019 07:57:24 GMT

Is Hit Count enabled ? Are Hit Count values shown in the rule base ?

Re: Top rule hit missing...

Arthur_DENIS1 — Wed, 04 Sep 2019 08:00:18 GMT

Yes for the both 🙂

It was working before the upgrade, when FW running R77.30

Re: Top rule hit missing...

G_W_Albrecht — Wed, 04 Sep 2019 08:28:43 GMT

If you just have upgraded, it looks like sk110343: HitCountdata in R80 SmartConsole is missing afterupgradefrom R75.4X / R76 / R77.X to R80/R80.10

Re: Top rule hit missing...

Arthur_DENIS1 — Wed, 04 Sep 2019 08:41:43 GMT

Indeed, seems similar - I was not aware about this sk

But I'm running R80.20 "Note: the upgrade procedure for R80.20 and above from the version mentioned above should work normaly, without this procedure."

And working fine with SmartConsole.

I will proceed to analyse this script HitCountUpgrade.sh to understand if it can be help me on this topic.

Re: Top rule hit missing...

G_W_Albrecht — Wed, 04 Sep 2019 09:59:22 GMT

If Hit Count is working in the rule base, i would involve TAC !