FortiGate防火墙过滤指定会话并清理

本文主要介绍如何通过命令行设置会话过滤条件，展示出对应的过滤会话详细信息及清除会话等操作。

FG600D3918701304 # diagnose sys  session filter（设置过滤条件）

vd                Index of virtual domain. -1 matches all.

sintf             Source interface.

dintf             Destination interface.

src               Source IP address.

nsrc              NAT'd source ip address

dst               Destination IP address.

proto             Protocol number.

sport             Source port.

nport             NAT'd source port

dport             Destination port.

policy            Policy ID.

expire            expire

duration          duration

proto-state       Protocol state.

session-state1    Session state1.

session-state2    Session state2.

clear             Clear session filter.

negate            Inverse filter.

FG600D3918701304 # diagnose sys  ses