fw ctl zdebug drop

Shows all dropped connections

cpstat fw

Show various connection stats (accepted,denied,logged) with a breakdown.

fw tab -s -t connections

How stressed was the firewall at peak (capacity planning)