eWeek: Kevin, you talked about enhancing your authentication to tie up more closely to users. I guess you mean as opposed to just authenticating the device?
Baradet: Or as opposed to just wide open, as it is now.
eWeek: Whenever we talk about this kind of mobility thing, I always think about IPv6, which incorporates mobile IP as part of the upgrade. Knowing what IPv6 is capable of doing, do you wish the vendors would get on the ball, or is it a cost that you just dont feel that you need to incur?
Baradet: Theres nothing driving me there at the moment.
eWeek: Gary, you guys work on a very large network and in an environment where I would think some of the things IPv6 brings to the table would be useful. Do you feel youve already gotten those things by other means, or is it just not an issue?
Gunnerson: Most people know that your internal network can be separate from your advertised external network, and we dont have a big issue with running out of address space.
eWeek: Are any of you currently looking at how things like the USA Patriot Act will affect the network and network requirements--things like storage capacity, storage availability, the ability to differentiate between business data or data that might have to be revealed to government investigators?
Baradet: The general policy thats out there now is that when someone shows up at the door, just pick up the phone and call the university counsels office, and they will then deal with the situation.
I do get cease-and-desist notices from the [Motion Picture Association of America] and the [Recording Industry Association of America] to take things down, and we do have to track and have the material removed. Thats part of the driving [force] behind the registration of devices and being able to trace something back to a user.
eWeek: Do you believe, one way or anther, that youre going to be held to a higher standard for being able to account for who did what at what time on your network?
Baradet: Thats a good question. I dont know, but I think that the civil hammer is one that people are more worried about, because no one has really been sued civilly yet and so damages havent been awarded. So theres no way of really gauging what your exposure is.
eWeek: What about the general question of increasingly complex rules on record retention?
Gunnerson: We have a rule that we started about 10 years ago that is pretty simple: If you delete an e-mail record, its gone in three days.
eWeek: Gone, gone?
eWeek: You have a system in place that says its gone from the backup--its gone from everything?
Gunnerson: We do a three-day rotation backup on e-mail records, and if it leaves your post office box, its gone.