Firewall log retention

Firewall log retention

Our basic firewall (without Advanced Security enabled or HIPAA BAA compliance) we do maintain basic inbound logging and reporting, and limited recording of LAN device activity (e.g., devices present on the LAN and traffic records). The duration of time before the logs wrap is dependent on the level of activity, but is generally in the range of weeks to 2 months.

Detailed records of probes and attack sources are held for 2-3 weeks, while consolidated records of such activity is condensed into round-robin databases that hold the info at different levels of granularity for up to 1 year.

Enabling Advanced Security increases the detail of information held in the logs (e.g., malicious threats detected and thwarted in our Threat Analysis offering). Adding HIPAA compliance further increases the level of detail for both inbound and outbound logging, connection statistics, etc.