When changing the Disarm log level and then selecting to 'restart later', simply restarting the MTA from the Control Center does not restart the process needed for the settings change to be picked up.
In order for the change to be picked up, the MTA needs to be restarted from the Command Line of the appliance. Please do the following steps:
This will restart the needed processes and the changes to Disarm should be fully implemented.