PaloAlto (CLI)

• Device CLI
  • Find rules with a zero hit-count
  • Reset rule hit-counters
• Panorama CLI

Device CLI

Find rules with a zero hit-count

show rule-hit-count vsys vsys-name vsys1 rule-base security rules all | match "vsys1       0"

Reset rule hit-counters

clear rule-hit-count vsys vsys-name vsys1 rule-base security rules all

clear rule-hit-count vsys vsys-name vsys1 rule-base security rules list [ "Rule1" "Rule2" "Rule3" ]

Panorama CLI