[AFM] Log implicite drop rule

Hi,

You can't modify the implicite rule.

You have to define a "default" global rule with the log statement activated.

The result will be the same than what you wanted.

So I have to define a default drop rule for every VS, SelfIP... ?

Yes, for every VS.

If your trafic is under global level, you just need one global rule.

You can change the log settings on the default action without creating an explicit rule. There is a DB key that can be changed in TMSH for the Global/Route-Domain context along with one for the Virtual Server/SelfIP context. I would be sure that the log server can keep up prior to changing these keys but other than that you should be ok.

Global Context - tmsh modify sys db tm.fw.globaldefaultrule.log value enable VS Context - tmsh modify sys db tm.fw.defaultrule.log value enable

Hi Steve,

Thanks a lot for the feedback,

Best regards,