PCI-1.4:

• PCI-1.4.a: Verify that mobile and/or employee-owned computers with direct connectivity to the Internet (for example, laptops used by employees), and which are used to access the organization’s network, have personal firewall software installed and active.
  

• PCI-1.4.b: Verify that the personal firewall software is configured by the organization to specific standards and is not alterable by mobile computer users.