PCIDSS
Payment devices need their own space
PCI DSS expects card data environments to be segmented from other systems. Segmentation also shrinks the scope of a PCI assessment.
Source: PCI DSS v4.0
- Home
- On Premises Infrastructure
- Network, firewall and Wi-Fi
A network that keeps things apart.
In many offices, guests, staff, printers, servers and card terminals share one flat network. Segmentation keeps a compromise in one place contained, and a reviewed firewall keeps out what should never get in.
What it covers
Network, firewall and Wi-Fi
Network segmentation
Staff, guest, server, voice and payment networks separated, with rules for what may talk to what.
Firewall review
Rules reviewed, unused and overly broad rules removed, and changes documented.
Secure remote access
VPN or zero trust access with multi factor authentication, replacing exposed remote desktop.
Wi-Fi design
Site surveys, access point placement and secure configuration for staff and guests.
Documentation
Network diagrams, IP plans and configuration backups kept current.
- PCI DSS v4.0
- VLAN segmentation
- Zero trust access
- Wi-Fi 6
How we do it
Survey
Current network, rules and coverage reviewed.
Design
Segmentation, rules and Wi-Fi planned.
Install
Changes made in planned windows.
Document
Diagrams and configurations recorded.
Field notes
Worth knowing
What you receive
- Network and infrastructure diagrams
- Firewall rule review report
- Segmentation design
- Wi-Fi survey and configuration
- Configuration backups
Questions
Why separate the guest Wi-Fi?
Guest devices are outside your control. Keeping them on a separate network stops them reaching your systems.
How often should firewall rules be reviewed?
At least annually, and whenever systems are added or removed. PCI DSS requires reviews every six months for in scope environments.
Is remote desktop safe to expose to the internet?
No. Exposed remote desktop is a common ransomware entry point. Put it behind a VPN or zero trust access with multi factor authentication.
More on On Premises Infrastructure
Talk to us about network, firewall and Wi-Fi
Tell us what you're working on. We'll listen, ask the right questions and recommend a practical next step. No obligation.
info@gabcoenterprises.com+1 345 769 4222