Re: network access log retention survey

[Joel Rosenblatt <joel () COLUMBIA EDU>]

Hi,

We keep network logs for 29 days .. this includes all netflow logs and extracts from DHCP, ARP cache and anything we 
need to know who accessed what from where
and when (authenticated services only).

Thanks,
Joel Rosenblatt

Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel


--On Wednesday, September 12, 2007 2:26 PM -0400 Kathy Bergsma <kbergsma () UFL EDU> wrote:

> How long do you retain network access logs - who is using an IP address and when?  Do you have a policy or law in your 
> state that specifies a retention time?
>
> --
> Kathy Bergsma
> UF Information Security Manager
> 352-392-2061



Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel