SMA100:After upgrading to 10.2.1.7, began receiving nonstop alert emails stating "WAF threat prevented:

After upgrading to 10.2.1.7, began receiving nonstop alert emails stating "WAF threat prevented:

After upgrading to 10.2.1.7, began receiving nonstop alert emails stating "WAF threat prevented:

Log Snippets

Mar 11 23:26:55 xrXXX SSLXXX: id=sslvpn sn=xxxxxxxxxxx0 time="2023-03-11 23:26:55" vp_time="2023-03-12 05:26:55 UTC" fw=10.2.0.2 pri=2 m=34 c=402 src=xx.xxx.8.20 dst="xx.xx.xx8.104" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack"

WAF Protection is enabled by default to protect only the SMA OS and requires no license. 

However, if you want to protect the offloaded web applications, you will need a WAF license.

Follow the steps to adjust the log level of Alert.