Do I need Logging Turned on on TAP security rule?

[RobinClayton]

I am implementing a tap interface to listen to our internal network traffic.

I don't want all the non THREAT traffic loged, if I turn of loggin in the security rule will the threats still go to the threat log?

(I am presently listening only on a very quiet interface which has generated only one "informational" alert in 24hrs.

Thanks

Robin

[pulukas]

The traffic log is separate from the threat log. so you can simply not enable traffic logging on the policy and only get threat logs as a result.

[RobinClayton]

Yep working perfectly without the logging on.

Rob