Tagged Questions
2
votes
2answers
385 views
PCI Compliance network scope
I was wondering if anyone could clarify the scope of PCI compliance with regard to multiple networks.
At present, there's one PCI compliant network to which another network connects via VPN. The PCI ...
3
votes
2answers
405 views
The point of PCI 1.3.1 through 1.3.3
In expansion to my previous question what qualifies as public access? I'm trying to wrap my head around the intent of the points 1.3.1 and 1.3.2 and 1.3.3 of the PCI standard.
I have four DMZs at my ...
4
votes
1answer
152 views
Store To Store communication through MPLS VPN
In a PCI environment with an MPLS VPN network setup should you allow store to store communication?
Do you think that an MPLS network would be consider secure enough for this? why or why not?
12
votes
3answers
2k views
Nessus vs third-party scans
As part of our PCI-DSS compliance process we get scans done by a third party. Based on the form and wording of the output, it's pretty clear they're using Nessus for most of their heavy lifting. Same ...
7
votes
4answers
390 views
Wireless Activity Monitoring for PCI DSS Compliance
In an effort to be PCI DSS compliant, I took a trustkeeper.net questionnaire. I failed the question that asks
Is the presence of wireless access points tested for by using a wireless analyzer at ...
