With IPHost Network Monitor you can run simple snmp requests against a Netscreen device in your network.
nsIfMonSaPolicyDeny
NETSCREEN If Monitor Sa Policy Deny
1.3.6.1.4.1.3224.9.4.1.12
packet drop due to denial by sa policy
Back to NETSCREEN-INTERFACE-MIB MIB page.
IPHost Network monitor allows you to monitor nsIfMonSaPolicyDeny on Netscreen device via the SNMP protocol. Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring Netscreen VPN routers right now.