--- title: "Monitor LAN zone policies" canonical: "https://docs.aryaka.com/space/KNOW/1610660/Monitor%20LAN%20zone%20policies" format: markdown --- You can monitor local LAN zone policies on the Zone Policies page. It contains two tables that display policy statistics including the priority and whether the policy was successfully applied for the selected site and zone. If it is not already open, open the Zone Policies page as follows: To open the Zone Policies page Log in to MyAryaka. The Home page appears. Click SD-WAN > Monitor in the left navigation pane. The Site: page appears. Click the Reference Site drop-down list and select the site whose LAN zone policies you want to monitor. Click Load Data in the LAN Traffic by Zone graph. The existing zones appear in a bubble graph. Click a zone, for example, VPN 0 . The selected zone's LAN Zone: page appears, for example, LAN Zone: VPN 0. Click the Zone Policies icon in the navigation bar at the bottom of the page. The Zone Policies page appears for the selected site and zone. The components of the Zone Policies page are described in the following sections. Apply filters The filter pane contain the following components that allow you to select the criteria that determines the graph details that appear on the page. Component Description Time field Determines the period for which to monitor and graph the traffic for the selected reference site. Each time period has an associated data interval defined for it. For example, if you select the Last 24 Hours time period, the associated data interval is 30 Minutes, which means a sample is taken and graphed every 30 minutes for a 24 hour period. Select one of the following time period/data interval pairs to graph the selected site's traffic: Last 1 Hour (1 minute) Last 4 Hours (1 minute) Last 8 Hours (1 minute) Last 24 Hours (1 minute) Last 7 Days (30 minutes) Last 30 days (30 minutes) Last Day (1 minute) Last Week (30 minutes) Last Month (30 minutes) Current Month (30 minutes) Custom (varies per custom time period defined) Note: Last Day is different from Last 24 Hours. The Last 24 Hours plots graph with traffic collected in the last 24 hours. Last Day plots the traffic during the last calendar day. Similarly, Last Month plots the traffic during the last calendar month, and so on. Current Month plots the traffic during the current calendar month. You can select a custom time, date, and year going as far back as five years. Apply button Saves and applies your filter selections to the page's graphs. Included tables The two tables that appear on the Zones Policies page are very similar, they only differ by the type of policy that is listed: local or internet. Local Policies table A local policy is a security policy applied at the LAN-side perimeter of the ANAP or a LAN zone of an ANAP. It acts on the network traffic entering the zone from the LAN of a site. The Local Policies table lists each policy's name in a table row, and displays the following statistics for it in an adjacent column: Priority—Determines the sequence that the policies are evaluated for a match. Numbers are assigned when policies are created. The policy with the lowest number is evaluated first, the next lowest number is evaluated next, and so on until the highest number is reached. Hit Count—The total number of times the policy is evaluated to see if it is a match for the selected site and zone's traffic. Succeeded—The number of times the policy is evaluated and determined it is a match for the selected site and zone's traffic. If the action on the policy was applied, then the policy is hit is recorded as succeeded. Failed—The number of times the policy is evaluated and determined it is not a match for the selected site and zone's traffic. If the action on the policy could not be applied, then the policy is hit is recorded as failed. For example, traffic was configured to be routed via VPN Path Internet but there was no route for it. Internet Policies An internet policy is a security policy that is configured to act on traffic flows between segments or zones or to the internet (either directly or over a cloud connector). The Internet Policies table lists each policy's name in a table row, and displays the following statistics for it in an adjacent column: Priority—Determines the sequence that the policies are evaluated for a match. Numbers are assigned when policies are created. The policy with the lowest number is evaluated first, the next lowest number is evaluated next, and so on until the highest number is reached. Hit Count—The total number of times the policy is evaluated to see if it is a match for the selected site and zone's traffic. Succeeded—The number of times the policy is evaluated and determined it is a match for the selected site and zone's traffic. If the action on the policy was applied, then the policy is hit is recorded as succeeded. Failed—The number of times the policy is evaluated and determined it is not a match for the selected site and zone's traffic.If the action on the policy could not be applied, then the policy is hit is recorded as failed. For example, traffic was configured to be routed via VPN Path Internet but there was no route for it. In this topic Related topics Configure zones Create internet policies Create customer-level WAN Routing and Basic Firewall policies Create site-level WAN Routing and Basic Firewall policies Monitor LAN zone traffic