Use the CLI commands in this procedure to view the traffic statistics of packet entries on a GRE whitelist, a port whitelist, and a network whitelist. When you enable each whitelist on the Network Security appliance, you can track the number of whitelist entries that are bypassed based on the matched known network, GRE, and port packets. No further analysis is performed.
Note
You view the traffic statistics on each whitelist only using the CLI.
Prerequisites
Administrator, Operator, Monitor, or Analyst access to the Network Security appliance.
Enable the specified ports that you need to whitelist. For details about how to enable a port whitelist, see Enabling or disabling a port whitelist using the Web UI or Enabling or disabling a port whitelist using the CLI
Enable GRE traffic so that all GRE packets are analyzed and whitelisted. For details about how to enable a GRE traffic whitelist, see Enabling or disabling a GRE traffic whitelist using the Web UI or Enabling or disabling a GRE traffic whitelist using the CLI .
Specify the IP addresses and subnets that you need to whitelist. For details about how to add rules to a network whitelist, see Adding rules to a network whitelist using the Web UI or Adding rules to a network whitelist using the CLI.
Go to CLI enable mode.
hostname > enable
View the statistics for all packet entries that are whitelisted. The following example is from a Trellix NX 10000 model.
hostname (config) # show policymgr whitelist stats ..... subnetf : Enabled wl_gre : Enabled wl_port: Enabled Non-whitelisted packets - 32219171199 Policymgr whitelisted packets - 231 Policymgr session whitelisted packets - 21581 Bxtract whitelisted packet - 0 Bxtract session whitelisted packets - 0 Whitelisted GRE packets - 119 Port Whitelisted packets - 3478The following example is from other Network Security appliances:
hostname (config) # show policymgr whitelist stats subnetf stats data : received: 161443545 no whitelist: 5228 no_whitelist_session: 4204542 sb_whitelist: 3454793 sb_whitelist_session: 153774128 bx_whitelist: 0 bx_whitelist_session: 0 gre_whitelist: 76 port_whitelist: 6660550