find unused ACP rules in NGFW

[hamidreza.taghipur]

hi

i use FTD 6.23 with FMC 6.4.0.4 , also i use splunk for syslog server .

i have alot ACP rules , how do i find unused rules in my ACP ?

[Marvin Rhoads]

I don't recall if your (very old) version of FMC has the "Show hit counts" option in the GUI. However, you can always check from the FTD cli using the following command:

show access-list | include hitcnt=0