FTD rules optimization using scriprs or any other option

[Nadeem Jan]

we need to delete FTD rules which have no hit counts. is there any option available since there are more then 15k rules

[Marvin Rhoads]

I would start with Security Cloud Control integration and avail yourself of the free Policy Optimizer and Analyzer tool there. It will highlight things such as duplicate and shadowed rules which is a frequent cause of zero hit counts.

[Nadeem Jan]

Hi Marvin/.

Thanks for reply. is there any guide that we could follow ?

[Marvin Rhoads · Accepted solution]

The tool itself is pretty self-explanatory.

There is also online help available. See the following: 
https://docs.manage.security.cisco.com/index.html#!c-analysis-remediation-and-reporting.html?highlight=policy%20analysis

[Nadeem Jan]

Hi Mervin,

thanks for sharing the solution.