topic Is there a CLI command to show total disabled rule count in General Topics

Is there a CLI command to show total disabled rule count

clyde.franklin — Thu, 19 Jan 2017 18:32:48 GMT

Is there a CLI command to show total count of rules disabled for policies versus having to count them one by one?

Re: Is there a CLI command to show total disabled rule count

gwesson — Thu, 19 Jan 2017 18:46:43 GMT

The following CLI command will approximate what you want:

show config running | match "disabled yes"

Note that this will be all rules that are disabled, not just security policy. If you want to check just the security policies, you'll want to save the running config xml from the firewall and just search that section (with grep or a text editor).

Re: Is there a CLI command to show total disabled rule count

RavindraTumu — Wed, 06 Sep 2023 14:54:18 GMT

This output is not really clear to understand.

Re: Is there a CLI command to show total disabled rule count

emr_1 — Thu, 07 Sep 2023 01:55:37 GMT

If you don't mind to use GUI, I believe it is easier than CLI.

Enter filter, then count the number of rules. Note that you need to decrease 2 rules from output. It always contains 2 default rules.