diff --git a/config/envoyconfig/listeners_main.go b/config/envoyconfig/listeners_main.go
index 95d023c03..6c52d6775 100644
--- a/config/envoyconfig/listeners_main.go
+++ b/config/envoyconfig/listeners_main.go
@@ -40,11 +40,6 @@ func (b *Builder) buildMainInsecureListener(
 		li.ListenerFilters = append(li.ListenerFilters, ProxyProtocolFilter())
 	}
 
-	// access log
-	if cfg.Options.DownstreamMTLS.Enforcement == config.MTLSEnforcementRejectConnection {
-		li.AccessLog = append(li.AccessLog, newListenerAccessLog())
-	}
-
 	filter, err := b.buildMainHTTPConnectionManagerFilter(ctx, cfg, fullyStatic)
 	if err != nil {
 		return nil, err