1.2 Do firewall and router configurations restrict connections between untrusted networks and any system in the cardholder data environment as follows: Note: An network” is any network that is “untrusted external to the networks belonging to the entity under review, and/or which is out of the entity’s ability to control or manage. Is inbound and outbound traffic restricted to that 1.2.1 Review firewall and router configuration which is necessary for the cardholder data standards environment? Examine firewall and router configurations Is all other inbound and outbound traffic Review firewall and router configuration specifically denied (for example by using an standards explicit all” or an implicit deny after allow “deny Examine firewall and router statement)? configurations 1.2.3 Are perimeter firewalls installed between all wireless Review firewall and router configuration networks and the cardholder data environment, and standards are these firewalls configured to deny or, if traffic is Examine firewall and router necessary for business purposes, permit only configurations authorized traffic between the wireless environment and the cardholder data environment? 1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.3 Are anti-spoofing measures implemented to detect Examine firewall and router and block forged sourced IP addresses from entering configurations the network? (For example, block traffic originating from the internet with an internal address) 1.3.4 Is outbound traffic from the cardholder data Examine firewall and router environment to the Internet explicitly authorized? configurations
1.2 Do firewall and router configurations restrict connections between untrusted networks and any system in the cardholder data environment as follows: Note: An “untrusted network” is any network that is external to the networks belonging to the entity under review, and/or which is out of the entity’s ability to control or manage. 1.2.1 Is inbound and outbound traffic restricted to that which is necessary for the cardholder data environment? Review firewall and router configuration standards Examine firewall and router configurations Is all other inbound and outbound traffic specifically denied (for example by using an explicit “deny all” or an implicit deny after allow statement)? Review firewall and router configuration standards Examine firewall and router configurations 1.2.3 Are perimeter firewalls installed between all wireless networks and the cardholder data environment, and are these firewalls configured to deny or, if traffic is necessary for business purposes, permit only authorized traffic between the wireless environment and the cardholder data environment? Review firewall and router configuration standards Examine firewall and router configurations 1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.3 Are anti-spoofing measures implemented to detect and block forged sourced IP addresses from entering the network? (For example, block traffic originating from the internet with an internal address) Examine firewall and router configurations 1.3.4 Is outbound traffic from the cardholder data environment to the Internet explicitly authorized? Examine firewall and router configurations
SAQ_B-IP.docx