Educause Security Discussion mailing list archives

Retention of NAT translations and Connections


From: "HOGGATT, ANDY F." <hoggatta () OTC EDU>
Date: Thu, 5 Jan 2012 16:12:17 -0600

Greetings all,

We have been reviewing our current process for logging Internet use of students/faculty/staff.  One aspect we've been 
debating is how long to store the firewall logs for Internet use of our users.  This includes building and teardown of 
connections, as well as NAT translation records.  Our perimeter firewall generates a copious amount of logs per day and 
we are trying to determine how long "long enough" is.

Would anyone be willing to share their input as to how long they store this type of information.  Any and all input is 
greatly appreciated.

Thank You,

Andy Hoggatt
Ozarks Technical Community College
Network Security Systems Administrator
hoggatta () otc edu<mailto:hoggatta () otc edu>
417.447.7535


Current thread: