21 reputation
2
bio website
location Amsterdam, Netherlands
age
visits member for 1 year, 5 months
seen Nov 21 '12 at 12:27

Nov
5
awarded  Supporter
Nov
2
comment Conceptual design of vulnerability scanning program in global retail network (PCI DSS)
Option 2. On the other hand, we are now talking about on-site solutions which are easier to find on the market. Like Scott said, having dedicated hardware or installing the scanning tool in the information system of the retail site. Here we also have risks of machines stolen or that precious information of internal network being compromised. For this option we would need to find a very reliable provider of hardware and/or software and that can be easily scalable for global operations. Any suggestions? Besides Nessus, which other vulnerability scanners have the best reputation?
Nov
2
comment Conceptual design of vulnerability scanning program in global retail network (PCI DSS)
Option 1. We are considering the option of setting up some sort of central workstation to make the vulnerability scanning remotely for all sites. Since this doesn’t seem to be a standard solution, we are hitting all sort of procedural complications. I am wondering if you guys have some idea on how to setup such scanning without compromising the network security (i.e. if we open the firewall, then we run the risk of someone else trying to get in).
Nov
2
comment Conceptual design of vulnerability scanning program in global retail network (PCI DSS)
A clarification: • The scanning concerns requirement 11.2.1 of PCI DSS regarding quarterly INTERNAL vulnerability scanning.
Oct
30
awarded  Student
Oct
30
asked Conceptual design of vulnerability scanning program in global retail network (PCI DSS)