Fortigate Session Diagnose

Video Tells about Troubleshooting the sessions in FortiGate Firewall.
diag sys session list
diag sys session clear
diag sys session filter
#fortios #fortigate #troubleshooting #firewall
If you want to know about NPU offloading codes check other video at below.
• Fortigate Session not ...
For Understanding Memory & CPU Utilization please check below:
• Fortigate Understandin...
For Any inputs, please comment in the Video.. Will be happy to assist.

[@TheHarshadrai]

Very good explanation. I’ve been looking for such explanations for so long and never found until now. Thank you. Keep up the good job

[@rosatechnocrat]

Thanks @theharshadrai for your feedback.

[@xxmsaxx]

Is there a command that could be used to clear the clash counter? I want to set it back to zero and watch for any new clash's after updating some NAT settings.

[@rosatechnocrat]

@xxmsaxx : There is no command/ option to clear the clash counter.
Only reboot clears the clash counters

[@AbdullahEldeeb]

fortigate# diag sys session full-state
Session table : table_size=262144 max_depth=2 used=53
kindly what is the meaning of the resulted line ?

[@rosatechnocrat]

This tells the table size of session table that fortigate can handle and used is that is already used for connections. This number varies based on Hardware model and software version.
To verify you compare the used=53 with the number of session that exists on firewall. it should be nearby example below
misc info: session_count=141 setup_rate=0 exp_count=0 clash=0