topic Re: Is the NAT hitcount works in R81? in General Topics

Is the NAT hitcount works in R81?

Dilian_Chernev — Tue, 03 Aug 2021 10:55:01 GMT

Hello ,

I have upgraded MGMT and GW from R80.40 to R81 few weeks ago and wanted to see if hitcount in NAT rules is working, but there are only '0'

Tried to disable/enable hitcount in General properties, but result is the same.

Is there some magic to be done to enable NAT hitcount ? (Access role hitcount is working properly)

Thanks

Re: Is the NAT hitcount works in R81?

Timothy_Hall — Tue, 03 Aug 2021 13:18:53 GMT

The hit counts are tracked on the gateway itself (they are not the result of log analysis on the SMS/Log Server) and the NAT hit counter function was added in version R81, so unless the gateway itself has been upgraded to R81+ as well I'm pretty sure those hit counts will always be zero.

Re: Is the NAT hitcount works in R81?

_Val_ — Tue, 03 Aug 2021 13:56:25 GMT

My understanding is, the topic-starter's GW is already R81

Re: Is the NAT hitcount works in R81?

Dilian_Chernev — Wed, 04 Aug 2021 06:30:30 GMT

Yup, GW is R81 JHF29. Will try JHF 36 these days.

GW is upgraded, not clean install and I suppose some registry entrée or something should be set to true 🙂

Re: Is the NAT hitcount works in R81?

Paul_F — Wed, 08 Sep 2021 07:47:42 GMT

We have this exact same problem. Management server running R81.10 and gateways running the current recommeneded release of R81 with Jumbo HF Take 36. The NAT hit counter worked for a few days, I thought this will be really useful feature, but then it stopped working and all NAT hit count values have been zero ever since, even after a right click and refresh. Policy hit count rules are still working though.

Re: Is the NAT hitcount works in R81?

Dilian_Chernev — Fri, 05 Nov 2021 07:51:41 GMT

Just to share a progress - I did a Advanced upgrade on the management from R81 to R81.10 on a new VM and suddenly the NAT hit count is available 🙂

And first hit shows a date from April 2021, when R80.40 to R81 upgrade was done.

So NAT hits have been collected since April, but not displayed in the SmartConsole somehow.

Re: Is the NAT hitcount works in R81?

HristoGrigorov — Fri, 05 Nov 2021 15:04:40 GMT

They work for me but I noticed values are refreshed only on policy install. Think that is by design.

Re: Is the NAT hitcount works in R81?

dwainr — Fri, 03 Dec 2021 15:54:20 GMT

Do you know why it was designed that way then? I only see hit counts after the policy install. I was really hoping to use this feature to monitor usage and potentially clean up unused rules.

Re: Is the NAT hitcount works in R81?

_Val_ — Sat, 04 Dec 2021 11:37:31 GMT

Yes, it is by design. The other way is to right-click on the rule and choose "refresh"

Re: Is the NAT hitcount works in R81?

Aviad_Nissim — Wed, 08 Dec 2021 11:06:18 GMT

Hi

We encountered similar cases before.
We strongly suggest installing Take_44 is the latest R81 Jumbo Hotfix Accumulator General Availability release that can be directly downloaded from Check Point Cloud using CPUSE and from this article:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114

If the problem still occurs, please open a ticket to CheckPoint.

Thanks