Firewall event logging must be enabled and the logs maintained for at least 30 days.
36 Miss. Code. R. 1-8.4