Thanks for your suggestion, but i already have an Access Log configured properly and operative.
I need to eliminate the 407 because the AccessLog is too big. And I need to decrease his growth.
Thanks for the answer. Why I should disable and enable the rule set? From your experience is needed?
I ask this because maybe I can't do that in production enviroment.
Ok I tried it again with 220.127.116.11 version and you don't need to disable and enable rule set, it Works fine.
It didn't work directly in an older version (7.1.x version) when I first used this criteria.