Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 16 replies
  • Subscribers 4 subscribers
  • Views 17389 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM & Qualys Guard PCI-DSS scan ?

vilic
Hi guys, 

I have a task of providing the PoC (proof of concept) on replacing TMG with Sophos UTM in a bank that is certified for PCI-DSS compliance.
UTM will be used only with Web Protection and Webserver Protection modules active.

Anyone implemented or using a UTM in that kind of environment ?


This thread was automatically locked due to age.
Parents
  • 0
    Ian's first advice is best.  A new installation should be designed and setup initially by someone with strong experience.

    Vilic, Bruce and I have clients that undergo regular PCI scans.  All I would have expected the presales team to say was, "There are a lot of UTMs passing PCI scans, so there's no problem."  I would not expect any of them to hand out a best practice document, and I would expect any new installation to have 2048-bit certs, SSLv3 disabled, etc.  The person that designs the configuration will do things like hide the User Portal behind a VPN, protect servers with the reverse proxy, etc.

    Cheers - Bob
  • 0 in reply to BAlfson
    Ian's first advice is best.  A new installation should be designed and setup initially by someone with strong experience.


    That doesn't guarantee that the underlying engine will pass vulnerability tests.
Reply Children
No Data