Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

The Appfirewall.log file is always empty. Do we have to disable SIP to get it to log?

While the log file appears in console and can be viewed from the Terminal commands, it is always empty.

Is SIP interrupting the logging? Hate to have to purchase other products to be able to view and record Firewall activity and if disabling SIP is the answer - it defeats its purpose... Been looking for an answer for months... Anybody?

iMac with Retina 5K display, macOS High Sierra (10.13.1)

Posted on Nov 11, 2017 10:12 PM

Reply
1 reply

The Appfirewall.log file is always empty. Do we have to disable SIP to get it to log?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.