Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: The Appfirewall.log file is always empty. Do we have to disable SIP to get it to log?

While the log file appears in console and can be viewed from the Terminal commands, it is always empty.

Is SIP interrupting the logging? Hate to have to purchase other products to be able to view and record Firewall activity and if disabling SIP is the answer - it defeats its purpose... Been looking for an answer for months... Anybody?

iMac with Retina 5K display, macOS High Sierra (10.13.1)

Posted on

Reply

Page content loaded

User profile for user: Horace Gonzalez

Question: The Appfirewall.log file is always empty. Do we have to disable SIP to get it to log?