Define Global Context action through CLI

How do I change the action of denied packets on the Global Context?   GUI setting: Security > Options: Network Firewall > Global Context   AFM mode is configured through tmsh modify sys db tm....