nerdexam
Palo_Alto_Networks

PCNSA · Question #60

How do you reset the hit count on a Security policy rule?

The correct answer is A. select a security policy rule, right click Hit Count > Reset. To reset the hit count for a specific security policy rule, an administrator can right-click the rule within the web interface and select the "Reset" option from the hit count column.

Submitted by miguelv· Apr 18, 2026Policy Evaluation and Management

Question

How do you reset the hit count on a Security policy rule?

Options

  • Aselect a security policy rule, right click Hit Count > Reset
  • Bwith a dataplane reboot
  • CDevice > Setup > Logging and Reporting Settings > Reset Hit Count
  • Din the CLI, type command reset hitcount <POLICY-NAME>

How the community answered

(51 responses)
  • A
    86% (44)
  • B
    2% (1)
  • C
    4% (2)
  • D
    8% (4)

Why each option

To reset the hit count for a specific security policy rule, an administrator can right-click the rule within the web interface and select the "Reset" option from the hit count column.

Aselect a security policy rule, right click Hit Count > ResetCorrect

In the Palo Alto Networks web interface, you can navigate to Policies > Security, right-click on the "Hit Count" column for a specific rule, and then select "Reset" from the context menu. This action directly resets the counter for that individual rule without affecting other rules or requiring a reboot.

Bwith a dataplane reboot

A dataplane reboot is an extreme measure that would clear many counters but is not the appropriate or specific method for resetting a single policy rule's hit count.

CDevice > Setup > Logging and Reporting Settings > Reset Hit Count

There is no such direct path as "Device > Setup > Logging and Reporting Settings > Reset Hit Count" for resetting individual policy rule hit counts; this path relates to general logging settings, not specific rule counters.

Din the CLI, type command reset hitcount <POLICY-NAME>

While there might be CLI commands to show or clear statistics, the precise command `reset hitcount <POLICY-NAME>` is not the standard or documented method for resetting hit counts for security policy rules; the common CLI command for resetting rule counters is `clear counter global policy <policy_name>`.

Concept tested: Resetting security policy rule hit counts

Source: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/policy/monitor-policy-rule-usage

Topics

#Security Policies#Rule Management#Hit Count#GUI Administration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice