Re: [fw-wiz] Using linux firewalls for PCI compliant infrastructure

On Wed, 25 Nov 2009 00:37:07 +0200
Siim Põder <siim@xxxxxxxxxxxxxxx> wrote:


We are using linux-based servers as firewalls for PCI compliant
infrastructure. During audits it has been OK so far but security
people internally have suggested that maybe a commercial product would
be better suited for PCI infrastructure (as it is pretty critical).

I'm personally very happy with the iptables firewalls - we can use all
the standard components for firewalls that we use for everything else
(including standard administration methods, patching and so forth).

What do you think, would a commercial firewall provide a tangible
improvement in security?
Is anyone else using linux-based firewalls for PCI (or otherwise
sensitive) infrastructure?

You could have your cake and eat it too by purchasing a shrink-wrap
Linux firewall. I have a client that had a regulatory requirement
to use an ICSA certified firewall and was able to satisfy that
requirement with one of those commercial Linux firewalls.


--
Dr. Everett (Skip) Carter Phone: 831-641-0645 FAX: 831-641-0647
Taygeta Scientific Inc. e-mail: skip@xxxxxxxxxxx
1340 Munras Ave., Suite 314 WWW: http://www.taygeta.com
Monterey, CA. 93940









_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

Relevant Pages

  • Using linux firewalls for PCI compliant infrastructure
    ... During audits it has been AOK so far but security ... be better suited for PCI infrastructure. ... I'm personally very happy with the iptables firewalls - we can use all ...
    (Pen-Test)
  • Re: [fw-wiz] Using linux firewalls for PCI compliant infrastructure
    ... During audits it has been OK so far but security ... be better suited for PCI infrastructure. ... I'm personally very happy with the iptables firewalls - we can use all ...
    (Firewall-Wizards)
  • [fw-wiz] Using linux firewalls for PCI compliant infrastructure
    ... During audits it has been OK so far but security ... be better suited for PCI infrastructure. ... I'm personally very happy with the iptables firewalls - we can use all ...
    (Firewall-Wizards)
  • Re: Defense in Depth
    ... What is meant by "layers" of security, is this: the entry points that must be ... Physical Layer - Physical access to the resources. ... attacks and other attacks that go after the software itself. ... "layer" in one long chain (lots of firewalls). ...
    (Security-Basics)
  • RE: Wireless Security for Home Users
    ... for most home users to create and/or manage 2 firewalls and a DMZ. ... As with most network security, ... investigate additional security features available from the WAP ...
    (Security-Basics)