Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  firewall policy evaluation

    Posted 10-17-2012 12:08

    Hi ,

    Can you please give me an ideea how to evaluate the policies on a ScreenOS firewall.

    I have seen on other firewalls from other vendors they have some counters on each rule. if it is hitted zero times it should be removed.

    How is this implemented on ScreenOS firewalls?

    Regards.



  • 2.  RE: firewall policy evaluation

    Posted 10-17-2012 14:23

    You add counting to the policy on the Advanced tab of the web interface.  Or by adding the keyword "count" to your set policy statement.

     

    Once activated you will see an icon for the counter in the web interface.  Selecting this will show the numbers.



  • 3.  RE: firewall policy evaluation

    Posted 10-19-2012 05:45

    Hi,

    I have checked "counting" but what can I see is only how much traffic passed the firewall using that rule not how many times it was accessed.

    As I have told you some other FW vendors have the option to show how many times a rule was hitted.

    Regards,

    Traian.



  • 4.  RE: firewall policy evaluation

    Posted 10-20-2012 20:51

    Hi,

     

    I dont think this is possible in juniper firewalls.

    A work around is to save the traffic log to SYSLOG and then view the policies used most.

    This will however need manual efforts.

     

    Thanks.

    Hardeep



  • 5.  RE: firewall policy evaluation
    Best Answer

    Posted 10-22-2012 05:57

    Hi,

     

    You can use the following command set for this:

     

    get pol id x1 | in "log count"

    ...

    get pol id xn | in "log count"

     

    The logging should be enabled in the policy(ies).