HMOL security

  • 2
  • Question
  • Updated 1 year ago
  • (Edited)
What logs do Aerohive keep (outside of a customer's HMOL)—i.e. applications used, websites visited, etc.? Any identifiable information? For how long? Is everything encrypted and do Aerohive employees have access to whatever's stored in others HMOL accounts?

Thanks.
Photo of —PH

—PH

  • 2 Posts
  • 0 Reply Likes

Posted 1 year ago

  • 2
Photo of —PH

—PH

  • 2 Posts
  • 0 Reply Likes
Let me rephrase: With everything integrity and security related today, I'd like to know where Aerohive stands on these questions—disclosures of any breach of the security, confidentiality, what logs you keep, how the information in our VHMs is stored, what information you have access to, if any of that information can be tied to a particular user, what happens the day a certain three-letter agency comes knocking on your door, etc., etc. I think these are valid questions and would very much like to get an official answer on where you stand when it comes to protecting your customer's integrity and security.

Thanks.
(Edited)
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes

Good questions, and thanks for asking because others are probably interested as well. 

I found a document (look at http://media.aerohive.com/documents/532692948_Cloud-Services-Platform-Overview.pdf) which discusses some of your questions. 

In general, no information that is traditionally considered personal or sensitive is logged, nor are log entries associated directly with users; however there are some indirect associations that could allow you to forensically follow the breadcrumbs from a log entry back to a purported user identity. 

To answer your TLA question, Aerohive is not a telecommunications carrier, so we are not required to facilitate lawfully authorized electronic surveillance. To the best of my knowledge, Aerohive has not been approached by any law enforcement or intelligence agencies but if we were we would comply with all lawful requests. 

Did this answer your concerns?

Photo of Crowdie

Crowdie, Champ

  • 972 Posts
  • 272 Reply Likes
If you are worried about a certain three letter body coming knocking on your door then use a European HMOL instance as the European privacy laws are much stricter than in the US.

You can tell where your HMOL instance is house by the server name.  It will be in the format hm-xxx-yyy.aerohive.com where the xxx indicates whether the server is housed in Australia, Europe or the United States.
(Edited)