Here is how you can find a policy being hit:

(Login to CLI)

  
shell
  
root@device# nsconmsg -d current | egrep -i "your string"

So for e.g. to find a respond policy that’s being hit:

  
shell
  
root@device# nsconmsg -d current | egrep -i responder