PCI-1.2.2:: Difference between revisions

From HORSE - Holistic Operational Readiness Security Evaluation.
Jump to navigation Jump to search
(New page: Choose a sample size of twenty-five percent of the population of all firewalls, routers, and routing infrastructure gear. An even distibution should come from the following locations:<br> ...)
(No difference)

Revision as of 13:40, 27 February 2007

Choose a sample size of twenty-five percent of the population of all firewalls, routers, and routing infrastructure gear. An even distibution should come from the following locations:

1: Between the Internet and the DMZ.
2: Between the DMZ and the internal network.


Note: The sample should include the chokepoint router at the Internet, the DMZ router and firewall, the DMZ cardholder network segment, the perimeter router, and the internal cardholder network segment.

Examine firewall and router configurations to verify that inbound and outbound traffic is limited to:

  • System administration/remote access methods (VPN, SSH).


--Mdpeters 08:40, 27 February 2007 (EST)