The SYSTEM/SECURITYLOG file, which contains security-sensitive SSL/TLS, IPsec, and SSH diagnostic information, is secured by the file attribute SECURITYADMIN, which restricts the access to a user or process that has the USERDATA privilege set.

The tools for examining the logs are LOGANALYZER, LOGGER and Locum SecureAudit.