deleting old rules

[deeway]

Hi,

Does anybody knows how I could delete old rules? How do I know if a rules has been used for the last couple of months. I would like to cleanup the firewall by disabling old unused rules. I had a look in the logfiles but these are about 700000 records long every day so that's no use. Is there some sort of hitcount?

 

[watchguardmonkey]

use the filter on the log file to see if there are any hits against the source or destiantion IP's in the rules you want to delete. then make your decisions on this.

 

[deeway]

We have about 20 firewall with about 500 rules for each FW. Isn't there a tool or something so I can see the rules that aren't being used in the last x months?