For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jinshu's avatar
Jinshu
Icon for Cirrus rankCirrus
Jul 29, 2016

AFM default deny logging

Hi,

 

Is it possible to enable logging for default deny without adding any rule in Global context?

 

AFM
security

2 Replies

  • Stephan_Mierau's avatar
    Stephan_Mierau
    Icon for Employee rankEmployee
    Jul 29, 2016

    sure, enable a publisher for the global-network logging profile and the Log Rule Matches in the profile

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Jul 31, 2016

    Kindly, there's a dB variable you can modify to enable global default logging.

     

    tmsh modify sys db tm.fw.globaldefaultrule.log value enable

     

    Does this achieve what you're after?

     

    N