Where are logging messages related to the inspection of application traffic found when enabling the Web Application Firewall (WAF) on a Virtual Service?

Question

Options

• ALogs tab of Virtual Service detail screen
• BSecurity tab of the Virtual Service detail screen
• CAnalytics tab of Virtual Service detail screen
• DAlerts tab of the Operations screen

• A
  3% (1)
• B
  6% (2)
• C
  81% (26)
• D
  9% (3)

Explanation

When WAF is enabled on a Virtual Service, traffic inspection logs appear in the Analytics tab because this is where all detailed per-request data - including security inspection events, policy matches, and application-layer analysis - is surfaced for that Virtual Service. WAF logging is treated as observability data, not a configuration item or alert condition, so it lives alongside other traffic analytics.

Why the distractors are wrong:

• A (Logs tab): The Logs tab shows general system/event logs for the Virtual Service, not granular WAF inspection details tied to individual requests.
• B (Security tab): The Security tab is where you configure WAF policies and settings - it's a control plane view, not a data/logging view.
• D (Alerts tab on Operations screen): Alerts are threshold-based notifications for operational events (e.g., pool down, high error rate), not WAF inspection records.

Memory tip: Think of Analytics as the "show my work" tab - it reveals what the Virtual Service actually did to each request, which is exactly where WAF inspection results (what it found, what it blocked) would appear. Config → Security tab; Results → Analytics tab.

No community discussion yet for this question.