DataWedge Forums
 |
| |
| |
|
| |
| |
|
|
| |
|
|
|
Join Our
Newsletter
Mailing List |
|
|
|
|
|
|
|
|
 |
|
| Author |
 Topic  |
|
|
DWadmin
Head Chef
USA
72 Posts |
 Posted - Nov 24 2008 : 8:35:34 PM
|
|
To be in PCI compliance with Visa are you using the right type of firewall?
|
 Thanks for your support 
Forum Administrator
http://www.datawedge.com
|
|
|
DataWedge
Head Chef
117 Posts |
Posted - Nov 25 2008 : 12:18:40 PM
|
The "right type" of firewall is going to be one that is HARDWARE based... the default "Windows firewall" that comes with the software just won't cut it.
This does not mean that you have to spend tons of money... my little Netgear router passed the vulnerability scan... and you can pick one up at any Office Depot fo $130.
Linksys, D-Link, Netgear, etc... if you have those brands and have all of your computers actually BEHIND the firewall, you are 95% there.
The last 5% is making sure that you don't have any "holes" opened up in your firewall... and making sure that you don't have any spyware or viruses broadcasting any information out.
By "holes" in the firewall, I mean points where applications can get through. Items such as Remote Access, etc. Having these "holes" opened up is not necessarily a bad thing, but you need to examine the password behind them.
Let's imagine that your firewall is actually a WALL... the process of opening up a HOLE in your firewall is actually akin to taking and running a PIPE from your WALL DIRECTLY to your computer. If the network vulnerability scan sees that pipe, it will start scratching at the computer behind the firewall it can get to.
This means that if you have a HOLE opened up in your firewall, you should be looking at where that HOLE connects to. If it's a REMOTE ACCESS application, for example, you should be looking at the passwords used to gain access to that computer to ensure that they are strong enough not to be guessed.
The last part is viruses and spyware. The network vulnerability scan will be 'listening' to see if any suspicious traffic is being broadcast... spyware/malware can record keystrokes and broadcast them to a remote location. You need to make sure that your network is spyware free. |
 |
|
| |
Topic |
|
|
|
| DataWedge Forums |
© 2010 - DataWedge ,LLC |
|
|
| This page was generated in 0.08 seconds. |
 |
|
|
Are you using a good Firewall?
