Forum Discussion

Erich_Rockman_1's avatar
Erich_Rockman_1
Icon for Cirrus rankCirrus
Mar 09, 2016

AFM Global Logging

11.6HF6 running. I am using some forwarding VIPs to route traffic between vlans and out to the internet from the nodes behind the bigip. I configured a single global rule (deny-all) with logging enabled for the rule. I configured a logging profile (local-db). I see the count going up in the active rule list, but no logs are generated. I keep seeing references to the global-network logging profile, but I cannot find it in the configuration. Can anyone shed some light on how to find/configure the global-network logging profile. Thanks.

 

AFM
security

2 Replies

Sort By
  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    Mar 14, 2016

    This is counter intuitive, yes, but the global-network profile is the default profile. Normally we suggest you not modify default profiles, modifying child profiles instead, but in this instance you must modify the default if you want to enable logging in the global context.