Are all insecure services, protocols, and ports Review firewall and router configuration identified, and are security features documented standards and implemented for each identified service? Examine firewall and router configurations Note: Examples of insecure services, protocols, or include but are not limited to FTP, Telnet, POP3, IMAP, and SNMP. 1.2 Do firewall and router configurations restrict connections between untrusted networks and any system in the cardholder data environment as follows: Note: An network” is any network that is “untrusted external to the networks belonging to the entity under review, and/or which is out of the entity’s ability to control or manage. Is inbound and outbound traffic restricted to that 1.2.1 Review firewall and router configuration which is necessary for the cardholder data standards environment? Examine firewall and router configurations Is all other inbound and outbound traffic Review firewall and router configuration specifically denied (for example by using an standards explicit all” or an implicit deny after allow “deny Examine firewall and router configurations statement)? 1.2.3 Are perimeter firewalls installed between all wireless Review firewall and router configuration networks and the cardholder data environment, and are standards these firewalls configured to deny or, if traffic is Examine firewall and router configurations necessary for business purposes, permit only authorized traffic between the wireless environment and the cardholder data environment? 1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.3 Are direct connections prohibited for inbound or Examine firewall and router configurations outbound traffic between the Internet and the cardholder data environment?
Are all insecure services, protocols, and ports identified, and are security features documented and implemented for each identified service? Note: Examples of insecure services, protocols, or include but are not limited to FTP, Telnet, POP3, IMAP, and SNMP. Review firewall and router configuration standards Examine firewall and router configurations 1.2 Do firewall and router configurations restrict connections between untrusted networks and any system in the cardholder data environment as follows: Note: An “untrusted network” is any network that is external to the networks belonging to the entity under review, and/or which is out of the entity’s ability to control or manage. 1.2.1 Is inbound and outbound traffic restricted to that which is necessary for the cardholder data environment? Review firewall and router configuration standards Examine firewall and router configurations Is all other inbound and outbound traffic specifically denied (for example by using an explicit “deny all” or an implicit deny after allow statement)? Review firewall and router configuration standards Examine firewall and router configurations 1.2.3 Are perimeter firewalls installed between all wireless networks and the cardholder data environment, and are these firewalls configured to deny or, if traffic is necessary for business purposes, permit only authorized traffic between the wireless environment and the cardholder data environment? Review firewall and router configuration standards Examine firewall and router configurations 1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.3 Are direct connections prohibited for inbound or outbound traffic between the Internet and the cardholder data environment? Examine firewall and router configurations
SAQ_B-IP_v3-1.docx