1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.3 Are direct connections prohibited for inbound or Examine firewall and router outbound traffic between the Internet and the configurations cardholder data environment? 1.3.5 Is outbound traffic from the cardholder data Examine firewall and router environment to the Internet explicitly authorized? configurations 1.3.6 Is stateful inspection, also known as dynamic packet Examine firewall and router filtering, implemented—that is, only established configurations connections are allowed into the network? Is personal firewall software installed and active on 1.4 Review policies and configuration any mobile and/or employee-owned devices that standards connect to the Internet when outside the network Examine mobile and/or (for example, laptops used by employees), and devices which are also used to access the network? Is the personal firewall software configured to Review policies and configuration specific configuration settings, actively running, and standards not alterable by of mobile and/or Examine mobile and/or devices? devices
1.3 Is direct public access prohibited between the Internet and any system component in the cardholder data environment, as follows: 1.3.3 Are direct connections prohibited for inbound or outbound traffic between the Internet and the cardholder data environment? Examine firewall and router configurations 1.3.5 Is outbound traffic from the cardholder data environment to the Internet explicitly authorized? Examine firewall and router configurations 1.3.6 Is stateful inspection, also known as dynamic packet filtering, implemented—that is, only established connections are allowed into the network? Examine firewall and router configurations 1.4 Is personal firewall software installed and active on any mobile and/or employee-owned devices that connect to the Internet when outside the network (for example, laptops used by employees), and which are also used to access the network? Review policies and configuration standards Examine mobile and/or devices Is the personal firewall software configured to specific configuration settings, actively running, and not alterable by of mobile and/or devices? Review policies and configuration standards Examine mobile and/or devices
cash-pic-saq-c-vt-v3.docx