Panorama Rule usage in nested device group hierarchy Policy Rule Hit Count

Reply
Highlighted
L1 Bithead

Panorama Rule usage in nested device group hierarchy Policy Rule Hit Count

Are Parent or Grandparent device groups not supposed to be able to have Rule Usage tracking?  My individual devices have rule usage (Hit Count, Last/First Hit), Child device groups have Rule Usage (Used or Unused), but my Parent and Grandparent device groups all have the "em-dash" for rules that do indicate having hits at the child and individual device level..

Policy Rule Hit Count has been enabled in Panorama since before this hierarchy was created I believe.

PanOS 8.1.x

 

Em-dash (—)

—When no firewalls in the device group—to which you pushed the policy rule—have Policy Rule Hit Count enabled or available for Panorama to determine the rule usage.

Monitor Policy Rule Usage

https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-firewalls/device-monitoring-on-...

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!