BULK DELETE ZERO HIT COUNT RULES

[DominusRex23]

Hi CheckMates,

We’re helping out a client who’s running Management R81.20, and their policy has grown to over 1,000 rules. After checking hit counts, we noticed a lot of rules haven’t been used at all — zero hits across the board.

The client wants to clean things up, but going through and deleting each rule manually would take forever. We’re wondering if there’s a smarter way to bulk-delete these unused rules. Maybe something scriptable or API-based that’s safe and won’t accidentally remove anything important.

Has anyone done this kind of cleanup before? Would love to hear how you approached it — tools, tips, or anything to watch out for.

Thanks in advance!

[Chris_Atkinson]

Some of the suggestions in this recent discussion may be helpful for you:
https://community.checkpoint.com/t5/General-Topics/Firewall-Automating-Firewall-Rule-Cleanup-Based-o...