Technical Tip: Disable logging on the firewall policy

[Vichu_94]

Description	This article describes how to disable logging on a particular firewall policy.
Scope	FortiGate.
Solution	The option to disable the logging for a particular firewall policy is only found in the CLI. Consider an example where the policy ID to edit is 11: configure firewall policy      edit 11         set logtraffic disable      end  To open the CLI from the GUI, see Technical Tip: How to open the CLI window in the GUI. This option is also available in the GUI, by editing a policy and disabling the 'Log Allowed Traffic' option: In the GUI, go to Policy & Object -> Firewall Policy, and select the policy.  Note: It does not affect existing sessions, so the traffic through the session logs continues until its termination. In certain situations, HA has session pickup enabled with some applications that continue sending traffic through the policy, which might cause some sessions to be aged, even update of the firewall of the cluster, the session might not expire as session pickup has been enabled under the HA cluster. To verify the session's existing time, use the command below: diagnose sys session filter src <source IP> diagnose sys session filter policy <policy ID> diagnose sys session filter dst <destination IP> diagnose sys session filter dport <port no> diagnose sys session list If existing sessions are not expired, traffic will still be logged and FortiGate will keep the logs, as in the example below: session info: proto=6 proto_state=01 duration=13595279 expire=3530 timeout=3600 flags=00000000 socktype=0 sockport=0 av_idx=0 use=4 state=log may_dirty npu f00 syn_ses orgin->sink: org pre->post, reply pre->post dev=58->73/73->58 gwy=...... To clear this session: diagnose sys session filter policy <Policy ID> diagnose sys session clear  After that, verify using the below command to verify the duration of the session, and the log should not be logged anymore: diagnose sys session list  Related articles: Firewall policy - FortiGate administration guide