Skip to main content
Ahmed_Galal
Staff
Staff
April 1, 2026

Technical Tip: How to stop generating SSL-related attack logs

  • April 1, 2026
  • 0 replies
  • 59 views
Description This article describes how to stop generating SSL-related attack logs.
Scope FortiWeb.
Solution

Following a recent OpenSSL update, a high volume of SSL-related attack logs is being generated. While these logs do not impact performance directly, they may lead to excessive disk usage and high CPU utilization in large-scale environments.

http_connection_failure.png

 

To disable these kinds of logs:

Option A. Disable the SSL-related logs globally:

At Log & Report -> Log Config -> Other log settings -> Enable 'Ignore SSL Errors'.

 

ssl errors.png

 

Option B. Disable the SSL-related logs per server policy:

 

config server-policy policy
    edit <policy name>
        set no-ssl-error-log enable
end

 

Related document:
Logging