Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

Panorama Rule usage in nested device group hierarchy Policy Rule Hit Count

L2 Linker

Are Parent or Grandparent device groups not supposed to be able to have Rule Usage tracking?  My individual devices have rule usage (Hit Count, Last/First Hit), Child device groups have Rule Usage (Used or Unused), but my Parent and Grandparent device groups all have the "em-dash" for rules that do indicate having hits at the child and individual device level..

Policy Rule Hit Count has been enabled in Panorama since before this hierarchy was created I believe.

PanOS 8.1.x


Em-dash (—)

—When no firewalls in the device group—to which you pushed the policy rule—have Policy Rule Hit Count enabled or available for Panorama to determine the rule usage.

Monitor Policy Rule Usage

Who Me Too'd this topic