Security policy reports

You can use the show security policy-report command to display detailed security policy reports. Optimizing security policies ensure that the policies are efficient. Over time, policies become disorganised and hence ineffective. You can use the show security policy-report command to notify end users when you create new policies or change existing policies which adversely affect other security policies. You can use the report-skip command at the [edit security policies from-zone zone-name to-zone zone-name policy policy-name] hierarchy level to exclude the policy from the policy analysis and from appearing in any future report.