Employees accessing remotely (VPN), do we need to log who accessed when, and for how long should we keep the logs?

we didn't know about this obligation either..... tbh we started keeping them for 6 months now

What needs to be logged: - VPN login time - Logout time - IP address - Username - Retention min 90 days, recommended 6-12 months

OpenVPN and Cisco AnyConnect keep automatic logs. Store them securely on a cloud server (AWS, Azure).

We experienced almost the exact same thing last year. If you don't write this down from the start, it leads to arguments later.

i've been dealign with this for a long time and honestly when making decisions write down the worst-case scenario too not just the best.

proven by experience.

This thread is archived. Forgotten test environments are more often the entry point than live systems.

Of course, it varies if your situation is different.

I'm curious too.

Correct. Start with a small trial; don't commit to everything at once.

Forgotten test environments are more often the entry point than live systems. Just leaving this note, it might be useful.

I'm a small business, let me explain from my side. Forgotten test environments are more often the entry point than live systems.

Hope this helps.

I cant fully agree with this. An untested backup is not a backup.

Good luck with that.

I went through the same thing.

There's one point I'm curious about. Don't rely on a single measure; go layer by layer.

If you have questions write them; I'll answer as best I can.

To get into the details: Taking measures without an inventory leaves doors you haven't seen open.

If I were you, I'd go this route.

Timely topic.

Noted, thanks.

I'll try it. If you get three different answers on a topic, the question was asked wrong.

Correct me if I'm wrong.

We experienced almost the exact same thing last year. Taking measures without an inventory leaves doors you havent seen open.

If you have questions, write them; Ill answer as best I can.

Thanks a lot, I'll try it today.