SSL error logs (7.6.0)

In addition to disabling or enabling SSL error logs at the global level through config log attack-log, you now have the flexibility to set it for specific server policies.

To enable logging the SSL errors for all server policies:

config log attack-log

set status enable

set no-ssl-error disable

end

To enable logging the SSL errors for a specific server policy (This is newly supported in 7.6.0):

config server-policy policy
    edit “policy-name”
        set no-ssl-error-log disable
    next
end

Please note that if there is a discrepancy between the values set individually for server policies and the global value in config log attack-log, the global value takes precedence.

The default value is "disable". If you use high-level SSL security settings which generate a high volume of these types of errors, it's recommended to enable the option to stop generating SSL error logs. This will help to reduce unnecessary resource consumption.

Related topics:

• config log attack-log

• config server-policy policy