PDF

Enable taboo contract deny logging by using the REST API

Updated: April 15, 2026

Want to summarize with AI?

Log in

Enables access control list (ACL) logging for traffic that a taboo contract denies.

The @directives attribute on the deny-rule relationship enables logging when its value is log.

Procedure

Send a POST request with an XML payload similar to the following example:

Example:

<vzTaboo dn="uni/tn-Tenant64/taboo-TCtrctPrefix"
                        name="TCtrctPrefix" scope="context">
                        <vzTSubj name="PrefSubj" rn="tsubj-PrefSubj">
                        <vzRsDenyRule directives="log"
                        forceResolve="yes"
                        rn="rsdenyRule-default"
                        tCl="vzFilter"
                        tDn="uni/tn-common/flt-default"
                        tRn="flt-default"/>
                        </vzTSubj>
                        </vzTaboo>

Deny logging is enabled for traffic that matches the taboo contract rule.