During the operation of the security device, a large number of systems, security, and running logs will be generated. The log functions are to record the security, behavior, and system logs generated by the device to view and analyze the logs conveniently

There are three ways to store log files: firewall (local), Cyber Command (CCOM) system, and Syslog.

The firewall stores log files locally by default, which is mainly restricted by the size of the device's disk. To meet compliance requirements, it is recommended to store log files by using firewalls combined with CCOM. This method is adopted on the one hand to meet the requirements of performing storage backup according to the rules, on the other hand, to ensure that the CCOM can store massive logs and assist in traceability analysis.