When looking at the Policy Optimizer > Rule Usage > Unused > Timeframe (lets say 180 days). Does this just mean that these are all the rules that haven't been used within the last 180 days?
The reason I ask is because if it is and it doesn't take into account the rule creation date, it could make using the tool a little more difficult in a large environment using Panorama.
Just as there is a "Exclude rules reset during the last X days" check box, it would be nice to have a "Exclude rules created during the last X days". Otherwise, I'm going to have to sort through all the (and there is a lot) exported csv files for creation date.
it doesnt take into account when the rule was created so anything you created 5 minutes ago that hasnt been hit will show up unfortinately
it does show when the rule was created and last edited in the optimizer, so there's that ;)