Policy Matching Analysis
This section describes how to use the policy matching analysis tool.
Context
Before policy matching analysis, run the device for a period of time to reflect the real situations.
A policy is not matched because either of the following reasons:
No traffic matches the policy.
The policy is more specific but has a lower priority. Therefore, the policy is always ignored.
Default policies are not included in policy matching analysis.
Policy Matching Analysis
- Choose .
- The device starts to analyze policy matching and displays policies that are not matched from the highest priority to the lowest priority, as shown in the following figure.
Click Refresh to refresh analysis results in real time.
By default, the analysis of the current day (Today) is displayed. To display the analysis of the Last 3 days, Last week, or Last month, select the option from the drop-down list on the upper-right corner.
The system displays the analysis results of Today, Last 3 days, Last week, and Last month at least 5 minutes after traffic passes the device.
Solution
Security policies are matched top down. The policy on the top has more significant implications than other policies. Therefore, verify the unmatched policies from the top down to the bottom. You can modify or delete unmatched policies as needed.
- To modify a policy, click the policy name.
- To delete a policy, select the check box before the policy and click the delete icon.
After a policy is modified or deleted, the analysis result automatically updates.