Design with AFM in the DMZ-Environment

Hey, Basically a different vendor firewall sits in front of the F5s, just doing a cutover from a different vendor firewall onto AFM. Obviously upstream FW doesn't have contexts while the F5s have route-domains.

I've done some testing now and the conclusion is I need to use %[RD] syntax with source/destination IPs. Makes sense given they are essentially different VRFs.

Does any one know where AFM logs locally? I'm after a session/debug log that I can tail.

Thanks, Ck