1.2 Do firewall and router configurations restrict connections between untrusted networks and any system in the cardholder data environment as follows: Note: An network” is any network that is “untrusted external to the networks belonging to the entity under review, and/or which is out of the entity’s ability to control or manage. Is inbound and outbound traffic restricted to that 1.2.1 Review firewall and router configuration which is necessary for the cardholder data standards environment? Examine firewall and router configurations Is all other inbound and outbound traffic Review firewall and router configuration specifically denied (for example by using an standards explicit all” or an implicit deny after allow “deny Examine firewall and router configurations statement)? 1.3.4 Are anti-spoofing measures implemented to detect and Examine firewall and router configurations block forged sourced IP addresses from entering the network? (For example, block traffic originating from the internet with an internal address) 1.3.5 Is outbound traffic from the cardholder data Examine firewall and router configurations environment to the Internet explicitly authorized? 1.3.6 Is stateful inspection, also as dynamic packet Examine firewall and router configurations filtering, implemented—that is, only established connections are allowed into the network?
1.2 Do firewall and router configurations restrict connections between untrusted networks and any system in the cardholder data environment as follows: Note: An “untrusted network” is any network that is external to the networks belonging to the entity under review, and/or which is out of the entity’s ability to control or manage. 1.2.1 Is inbound and outbound traffic restricted to that which is necessary for the cardholder data environment? Review firewall and router configuration standards Examine firewall and router configurations Is all other inbound and outbound traffic specifically denied (for example by using an explicit “deny all” or an implicit deny after allow statement)? Review firewall and router configuration standards Examine firewall and router configurations 1.3.4 Are anti-spoofing measures implemented to detect and block forged sourced IP addresses from entering the network? (For example, block traffic originating from the internet with an internal address) Examine firewall and router configurations 1.3.5 Is outbound traffic from the cardholder data environment to the Internet explicitly authorized? Examine firewall and router configurations 1.3.6 Is stateful inspection, also as dynamic packet filtering, implemented—that is, only established connections are allowed into the network? Examine firewall and router configurations
SAQ_A-EP_v3%20%285%29.docx