1.2.2 Are router configuration files secured from unauthorized Review firewall and router configuration access and synchronized—for example, the running (or standards active) configuration matches the start-up configuration Examine router configuration files and (used when machines are booted)? router configurations 1.2.3 Are perimeter firewalls installed between all wireless Review firewall and router configuration networks and the cardholder data environment, and are standards these firewalls configured to deny or, if traffic is Examine firewall and router necessary for business purposes, permit only configurations authorized traffic between the wireless environment and the cardholder data environment? 1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.1 Is a DMZ implemented to limit inbound traffic to only Examine firewall and router system components that provide authorized publicly configurations accessible services, protocols, and ports? 1.3.2 Is inbound Internet traffic limited to IP addresses within Examine firewall and router the DMZ? configurations 1.3.3 Are anti-spoofing measures implemented to detect and Examine firewall and router block forged sourced IP addresses from entering the configurations network? (For example, block traffic originating from the internet with an internal address) 1.3.4 Is outbound traffic from the cardholder data Examine firewall and router environment to the Internet explicitly authorized? configurations 1.3.5 Are only established connections permitted into the Examine firewall and router network? configurations
1.2.2 Are router configuration files secured from unauthorized access and synchronized—for example, the running (or active) configuration matches the start-up configuration (used when machines are booted)? Review firewall and router configuration standards Examine router configuration files and router configurations 1.2.3 Are perimeter firewalls installed between all wireless networks and the cardholder data environment, and are these firewalls configured to deny or, if traffic is necessary for business purposes, permit only authorized traffic between the wireless environment and the cardholder data environment? Review firewall and router configuration standards Examine firewall and router configurations 1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.1 Is a DMZ implemented to limit inbound traffic to only system components that provide authorized publicly accessible services, protocols, and ports? Examine firewall and router configurations 1.3.2 Is inbound Internet traffic limited to IP addresses within the DMZ? Examine firewall and router configurations 1.3.3 Are anti-spoofing measures implemented to detect and block forged sourced IP addresses from entering the network? (For example, block traffic originating from the internet with an internal address) Examine firewall and router configurations 1.3.4 Is outbound traffic from the cardholder data environment to the Internet explicitly authorized? Examine firewall and router configurations 1.3.5 Are only established connections permitted into the network? Examine firewall and router configurations
PCI-DSS-v3_2-SAQ-A_EP.docx