Which firewall rules being hit/in-use

[ozlecz]

i have firewall rules created as a result of creating 3 gateway groups.

Because of this i want to know how could we see which among the firewall rules are being hit or in-use. I am having problems and this will help me a lot in troubleshooting

thanks

[muswellhillbilly]

Consult your firewalls logs (Status/System Logs, then choose Firewall tab).

Remember that rules are applied from the top down, so the first rule which matches the traffic passing through will apply. Make sure you tick the Log option in each rule you want to show up in the logs.

[jimp]

Diagnostics > pfTop, use the Rule or Label view.  No hit #, but the other counters are helpful.