Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

show services ssl proxy counters

Syntax

Description

Display statistical counters for the SSL proxy sessions.

Note:

When the CLI is in logical system context mode and you enter an operational-mode command, the output of the command displays information related to the logical system only.

Options

all

Display information about counter values for all SSL proxy sessions
errors

Display information about counter values for all SSL proxy sessions errors.
info

Display some informational counters which are subset of all the counters
pic-info fpc-slot slot number pic-slot slot-number

Display the information for the FPC in the specified slot.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show services ssl certificate command. Output fields are listed in the approximate order in which they appear.

Table 1: show services ssl proxy counters Output Fields

Field Name

Field Description

Level of Output

Session create failed

The number of failed proxy sessions

errors, all

non SSL sessions received

The number of non-SSL sessions received

errors, all

memory failures

The number of errors related to memory. Example, memory errors such as the device is on “low memory” is indicated by this counter.

errors, all

session dropped

The number of dropped proxy sessions.

errors, all

sessions matched

The number of matched proxy sessions.

info, all

sessions created

The number of newly created proxy sessions.

info, all

sessions destroyed

The number of dropped or destroyed proxy sessions.

info, all

sessions ignored

The number of proxy sessions that are ignored.

info, all

sessions ignored : backup only

The number of sessions ignored on the backup node in a chassis cluster setup.

In chassis cluster or high-availability mode, the SSL session is processed only on the active node and on the backup node session is ignored. This counter indicates the session ignored on the backup node.

info, all

sessions whitelisted : IP based

The number of all sessions that are allowlisted based on IP addresses.

info, all

sessions whitelisted : url based

The number of all sessions that are allowlisted based on the URL categories.

info, all

crl : data added

The number of times CRL data is added.

info, all

crl : certificate revoked

The number of sessions dropped because of checking for revoked certificates from servers.

info, all

crl : no crl info present

The number of sessions dropped because no CRL information was present.

info, all

crl : no CA certificate

The number of sessions dropped because no CA certificate was present.

info, all

SSL sessions

Number of SSL sessions

info, all

SMTP over STARTTLS

Number of SMTP over STARTTLS sessions

info, all

IMAP over STARTTLS

Number of IMAP over STARTTLS sessions

info, all

POP3 over STARTTLS

Number of POP3 over STARTTLS sessions

info, all

SMTP sessions

Number of SMTP sessions

info, all

IMAP sessions

Number of IMAP sessions

info, all

POP3 sessions

Number of POP3 sessions

info, all

Server not supporting STARTTLS

Number of times server not supported STARTTLS sessions

info, all

Client not supporting STARTTLS

Number of times client not supported STARTTLS sessions

info, all

Unified policy : default profile hit

The number of times sessions matched default SSL proxy profile.

info, all

Unified policy : no default profile

The number of times sessions are dropped because no default SSL proxy profile available.

info, all

proxy sess matched with early dynapp

The number of times sessions matched after receiving the dynamic application details from SNI.

all

proxy sess ignored with early dynapp

The number of times proxy sessions are disengaged after receiving details from SNI because no SSL proxy profile was configured or the matched pre-identification default policy action was to ignore the session.

all

proxy sess matched with ssl as dynapp

The number of times sessions are matched because the sessions received unknown application details from SNI or the sessions have not received details from SNI.

all

proxy sess ignored with ssl as dynapp

The number of times proxy sessions are disengaged either because SSL proxy profile was not configured for the matched policy or the matched pre-identification default policy action was to ignore the session

all

proxy sess matched with default fw policy

The number of times sessions matched after receiving the dynamic application details from SNI and identified application matched with default security policy.

all

proxy sess ignored with default fw policy

The number of times sessions disengaged because the identified dynamic application details from SNI has not matched with the default security policy.

all

proxy sess matched with pre-id fw policy

The number of times sessions matched after receiving the dynamic application details from SNI and the application matched pre-identification default policy.

all

proxy sess ignored with pre-id fw policy

The number of times sessions disengaged because the identified dynamic application details from SNI has not matched with the pre-identification default security policy.

all

Sample Output

show services ssl proxy counters info

show services ssl proxy counters errors

show services ssl proxy counters all

Release Information

Command introduced in Junos OS Release 19.3R1.

Related Documentation