Just in case, another user submitted a quick and dirty "How-To" for changing the default action of "Allow" to "Block" on the log4j signature.
Type = Signature
Action = Block
Status = enable.
Then search the log4j signature and click add to signature.
Move to the top of the signatures list.
Thanks @none1234 for posting.