Define Global Context action through CLI

How do I change the action of denied packets on the Global Context?

GUI setting: Security > Options: Network Firewall > Global Context

AFM mode is configured through tmsh modify sys db tm.fw.defaultaction