1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.4 Is outbound traffic from the cardholder data Examine firewall and router environment to the Internet explicitly authorized? configurations 1.3.5 Are only established connections permitted into the Examine firewall and router network? configurations Is personal firewall software (or equivalent 1.4 Review policies and configuration functionality) installed and active on any portable standards computing devices (including company and/or Examine mobile and/or employee-owned) that connect to the Internet devices when outside the network (for example, laptops used by employees), and which are also used to access the CDE? Is the personal firewall software (or equivalent Review policies and configuration functionality) configured to specific configuration standards settings, actively running, and not alterable by Examine mobile and/or users of mobile and/or employee-owned devices? devices
1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.4 Is outbound traffic from the cardholder data environment to the Internet explicitly authorized? Examine firewall and router configurations 1.3.5 Are only established connections permitted into the network? Examine firewall and router configurations 1.4 Is personal firewall software (or equivalent functionality) installed and active on any portable computing devices (including company and/or employee-owned) that connect to the Internet when outside the network (for example, laptops used by employees), and which are also used to access the CDE? Review policies and configuration standards Examine mobile and/or devices Is the personal firewall software (or equivalent functionality) configured to specific configuration settings, actively running, and not alterable by users of mobile and/or employee-owned devices? Review policies and configuration standards Examine mobile and/or devices
PCI-DSS-v3_2-SAQ-C_VT.docx