This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM & Qualys Guard PCI-DSS scan ?

Hi guys,

I have a task of providing the PoC (proof of concept) on replacing TMG with Sophos UTM in a bank that is certified for PCI-DSS compliance.
UTM will be used only with Web Protection and Webserver Protection modules active.

Anyone implemented or using a UTM in that kind of environment ?

This thread was automatically locked due to age.

Parents

0 vilic over 10 years ago

Results of Qualys scan, FYI:

Several vulnerabilites reported regarding self-sign certificate and certificate chains (as expected), but also two potential one regarding old version of OpenSSH (desribed here, along with the response from the Sophos support - https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22621).

In my case, client security department accepted quoted answer from the Sophos support, so we are moving further to PoC..[:)]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 vilic over 10 years ago

Results of Qualys scan, FYI:

Several vulnerabilites reported regarding self-sign certificate and certificate chains (as expected), but also two potential one regarding old version of OpenSSH (desribed here, along with the response from the Sophos support - https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22621).

In my case, client security department accepted quoted answer from the Sophos support, so we are moving further to PoC..[:)]
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data