The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Disable Firewall allowed and blocked traffic logging in standalone systems

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

  1. Log on to the system as a user with administrator rights.

  2. Change the directory to the Firewall bin directory:

    /opt/McAfee/ens/fw/bin/

  3. Run the command:

    • To disable logging all allowed traffic:

    ./mfefwcli --log-allowed-traffic disable

    • To disable logging all blocked traffic:

    ./mfefwcli --log-blocked-traffic disable

Related articles
  • Enable Firewall
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Firewall Product Guide - Linux > Configure Firewall on standalone systems
  • Configure Firewall in Regular mode
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Firewall Product Guide - Linux > Configure Firewall on standalone systems
  • View the status of Firewall
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Firewall Product Guide - Linux > Configure Firewall on standalone systems