The feature known as "Policy Coverage" allows the administrator to report on the rules and objects that match user requests processed through the ProxySG's current policy.
For more details on using this feature please refer to How can I find which policy rules are being used?
This articles explains how to create a new snapshot that will contain the policy coverage details.
Blue Coat support may request that you configure sysinfo-snapshots for troubleshooting policy related issues and high CPU issues which is caused by Policy Evaluation. Policy coverage will identify rules that are matching user requests, so adding it to your snapshots can be very useful in troubleshooting an issue like this.
Before setting up the Snapshot as detailed in the resolution section of this article, make sure that Policy Coverage is enabled. If not, adding policy coverage to your snapshots will not display policy usage. By default this feature is enabled, and in SGOS 18.104.22.168 the administrator has the option of disabling this feature via the CLI.
Verify if Policy coverage is enabled from GUI Statistics tab > Advanced > Policy > View Current Policy Coverage.
CREATING SNAPSHOTS VIA THE MANAGEMENT CONSOLE (GUI)
|Total Number To Take:||Check next to infinite|
|Maximum Number To Store||100|
|Enabled||Place a check next to Enabled|
(Optional) If you prefer, you can create the new snapshot job via the ProxySG appliance Command Line Interface (CLI).
Enter configuration commands, one per line. End with CTRL-Z.
ProxySG#(config diagnostics)snapshot create Snapshot_PolicyCoverage
ProxySG#(config diagnostics)snapshot edit Snapshot_PolicyCoverage
ProxySG#(config snapshot Snapshot_PolicyCoverage)target /policy/coverage
ProxySG#(config snapshot Snapshot_PolicyCoverage)interval 5
ProxySG#(config snapshot Snapshot_PolicyCoverage)keep 100
ProxySG#(config snapshot Snapshot_PolicyCoverage)enable
ProxySG#(config ssnapshot Snapshot_PolicyCoverage)exit