diagnose : policy
 
policy
Use this command to view the process ID, memory usage, live sessions, and traffic statistics associated with a server policy.
To use this command, your administrator account’s access control profile must have at least r permission to the sysgrp area. For more information, see “Permissions”.
Syntax
diagnose policy dashboard {all | list <policy_name>}
diagnose policy memory {all | list <policy_name>}
diagnose policy pserver list <policy_name>
diagnose policy session {list <policy_name>}
diagnose policy traffic {list <policy_name>}
diagnose policy traffic {list <policy_name>}
diagnose policy period-blockip {list <policy_name>}
diagnose policy period-blockip {delete <policy_name>}{ipv4 | ipv6}
Variable
Description
Default
dashboard {all | list <policy_name>}
Presents information similar to that displayed on the web UI’s dashboard.
No default.
memory {all | list <policy_name>}
For each live session, displays the source IP and port, and the destination IP and port.
No default.
pserver list <policy_name>
Displays the status of physical servers covered by the policy.
No default.
session {list <policy_name>}
Displays IP session information for TCP and UDP connections.
No default.
traffic {list <policy_name>}
Displays traffic throughput (bandwidth usage) information.
No default.
period-blockip {list <policy_name>}
Displays client IP addresses whose requests are temporarily blocked because the client violated a rule in the specified policy with an Action value of Period Block.
No default.
period-blockip {delete <policy_name>}{ipv4 | ipv6}
Unblocks the specified client IP address that FortiWeb has blocked because it violated a rule in the specified policy with an Action value of Period Block. (FortiWeb can still block the address because it violates a rule in a different policy.)
No default.
<policy_name>
Type the name of an existing server policy.
No default.
Example
This example shows the output of the dashboard command. The operation mode (opmode) is indicated by its code number:
Table 9: Operation mode (opmode) values
Integer
Meaning
2
True transparent proxy
4
Reverse proxy
8
Offline protection
32
Transparent inspection
diagnose policy dashboard list Policy1
opmode is 4
---------policy--------
name: Policy1
pid: 433
vip: 172.20.120.28
http-port: 80
https-port: 0
freemem: 21357088
---------end--------
Example
This example shows the output of the pserver list command. The alive value indicates the status of the server health check:
Table 10: Server health check (alive) values
Integer
Health check status
Health Check Status icon in Policy Status dashboard
0
failed
red
1
passed
green
2
disabled
grey
diagnose policy pserver list Policy1
policy(Policy1)
server-pool(FWB_server_pool):
total = 1
server[0]
id: 1
ip: 10.20.1.22
port: 80
alive: 2
session: 0
status: 1
Related topics
config server-policy policy
diagnose network ip
diagnose debug flow filter
get system performance