If you override the firewall services section to add an IP to support access, then save changes, you will observe that the UI has also overridden the syslog forwarding configuration.
VCO version - R6004-20240716-GA
If you override the firewall services section to add an IP to support access, then save changes, you will observe that the UI has also overridden the syslog forwarding configuration.
Additionally, there is no way in the UI to re-disable syslog forwarding override.
This is a known software issue - 152178
Issue will be fixed in upcoming VCO version - 6.0.0.6 and 6.1.0.0 latest versions