diff --git a/cheat-sheets/Fortigate-debug-diagnose-complete-cheat-sheet.adoc b/cheat-sheets/Fortigate-debug-diagnose-complete-cheat-sheet.adoc
index c7a6070..a894941 100644
--- a/cheat-sheets/Fortigate-debug-diagnose-complete-cheat-sheet.adoc
+++ b/cheat-sheets/Fortigate-debug-diagnose-complete-cheat-sheet.adoc
@@ -24,6 +24,11 @@ NOTE: All debug will run for 30 minutes by default, to increase use `diagnose de
 |Command
 |Description
 
+|*diagnose firewall iprope lookup <src IP> <src port> <dst IP> <dst port>
+<protocol IANA protocol number> <src interface>*
+|Policy lookup for any combination of IPs and ports - use to see what policy (if
+any) matches traffic between specific IP addresses and ports.
+
 |*diagnose debug flow filter*
 |Show the active filter for the flow debug