Security Rule - Not Logging at Session Start - Interpreting BPA Checks - Policies
See how the Not Logging at Session Start best practice check can help you, and learn what happens if Log at Session Start is enabled.
It is highly recommended to log all traffic and monitor the logs for unexpected applications, users, traffic, and behaviors. However, the Log at Session Start box should not be enabled in a rule, except for troubleshooting purposes. This best practice assessment check ensures the Log at Session Start box is unchecked for policy rules.