Using Continue rules to set Access rule logging options

Instead of setting the log level for all rules individually, you can set a Continue rule in a template or in a policy to set the default log level.

One common use for the Continue action is to set the default log level for all subsequent rules. The log level for any subsequent matching rules can be left undefined. The rules trigger logging as defined in the Continue rule.

Figure: Setting the default log level

The default log level is set to Transient for any source, destination, or service. All subsequent rules in this policy and any sub-policies log Transient by default. Individual rules can still override this option with specific log levels, such as Essential or Stored.

If logging is not defined for a rule and there is no prior Continue rule that sets logging options, the default log level is Stored.