[j-nsp] SRX Command
Ben Dale
bdale at comlinx.com.au
Tue Sep 24 00:45:36 EDT 2013
After I spent a bit of time building an op script to print policy matches out in a nicely formatted table, I notice that this feature is now available for all policies even without the "then count" action from 12.1:
show security policies hit-count
Cheers,
Ben
On 24/09/2013, at 8:45 AM, Edward Dore <edward.dore at freethought-internet.co.uk> wrote:
> You'll need to add the "count" action to the "then" statement on each security policy if you want to track the number of times that the policy has been matched.
>
> Edward Dore
> Freethought Internet
>
> On 23 Sep 2013, at 23:08, Harri Makela wrote:
>
>> Hi All
>>
>> Is there any command in SRX which I can use to check "number of times FW policy has been used". Actually I want to clear all FW policies which are not being used for last 12 months or so. I don`t know much about scripting but can try to get some help if I can think of a command which can be rung through different zones combinations.
>>
>>
>> Thanks in Advance !
>> HM
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
More information about the juniper-nsp
mailing list