The Hit Count feature, which tracks the number of connections matched by each rule, is configured at the policy layer level. In SmartConsole, an administrator must edit the properties of a specific Access Control Policy layer (e.g., the "Network" layer) to find the checkbox that enables or disables Hit Count tracking. Once enabled for the layer, counters will be active for all rules within it.

A. Hit Count is not configured on the policy package itself, but on a specific layer within the Access Control policy of that package.

B. This is a management and display feature configured in SmartConsole, not a setting on the individual Security Gateway objects.

D. This setting is specific to a policy layer, not a global property that affects the entire Security Management Server.

1. Check Point R81.20 Security Management Administration Guide, Chapter: "Access Control", Section: "Working with the Access Control Rule Base", Subsection: "Hit Count". The guide provides the exact procedure: "To enable or disable Hit Count for a Layer: ... Select a layer and click Edit. ... Select or clear Enable Hit Count."