This read-only 64-bit counter reports the total number of sessions blocked by firewall rules on the NGFW appliance. An admin monitors it to gauge how actively the firewall's policy is rejecting traffic, which is useful both for security auditing and for spotting a misconfigured rule blocking legitimate traffic. For example, a sudden jump in blocked sessions after a policy change could indicate a new rule is too restrictive and is dropping traffic it shouldn't.