Point to Point radios - Payment card processing
-
@scotth said in Point to Point radios - Payment card processing:
Has anyone dealt with Ubiquity or similar with regard to point to point radios for payment card processing?
We are going to check on radios in lieu of trenching, conduit & wire. It has to be secure and documented as such. We would have to be able to pass a PCI audit if it comes down to it, although we don't believe it will come to that. We're still in discovery mode.
In any case, I have a vendor that says that he has a Ubiquity rep that has sold these in the past for warehousing and golf courses for process payment card processing.
If anyone knows of a usage case that I can pull up or even model #s, that would be gold.
The longest run that I need is no more than 100'. If I tag cameras on this, I'd need to be able to have separate networks. Maybe even point to point or point to multi-point for a radio network for each separate network. Dunno.TIA
100' won't most access points be able to do 100'?
-
That distance is nothing, in open air even consumer gear can do that distance no issue with stock hardware. Only thing that matters is encryption on the line. For PCI, the wireless link would, in most cases, be more secure than the wired one.
-
Access points will work fine. I'm doing discovery. Is there an application that requires that I use point to point vs APs that I lock down? Reminder: I may end up confronted with PCI issues down the road. For now, we'll be processing privately issued cards. If we move to fleet cards issued nationally, then I want to be thorough before we settle on a solution. I will never get a second chance correct without a lot of grief.
BTW, this is for a convenience store that has a 'captive' island for diesel sales to privately issued card holders. -
Aw. crap. I have a site down. Remote won't work. Printer issue. It's windshield time.
I'll check back.
You guys rock. -
@scotth said in Point to Point radios - Payment card processing:
Access points will work fine. I'm doing discovery. Is there an application that requires that I use point to point vs APs that I lock down? Reminder: I may end up confronted with PCI issues down the road. For now, we'll be processing privately issued cards. If we move to fleet cards issued nationally, then I want to be thorough before we settle on a solution. I will never get a second chance correct without a lot of grief.
BTW, this is for a convenience store that has a 'captive' island for diesel sales to privately issued card holders.AP and Point to Point are two terms for the same thing. You build a point to point connection out of two APs.
-
@scotth said in Point to Point radios - Payment card processing:
Access points will work fine. I'm doing discovery. Is there an application that requires that I use point to point vs APs that I lock down? Reminder: I may end up confronted with PCI issues down the road. For now, we'll be processing privately issued cards. If we move to fleet cards issued nationally, then I want to be thorough before we settle on a solution. I will never get a second chance correct without a lot of grief.
BTW, this is for a convenience store that has a 'captive' island for diesel sales to privately issued card holders.Providing the channel is encrypted with a reasonably strong cipher you should be good with PCI.
-
AP sounds good.
In this scenario, we don't fall under PCI. Sort of a tangential situation. Knowing how government & regulators work, I'm guessing that there will attempts in the future to umbrella our sites in somehow. I don't mind, I just want to prepare now with a little research and buy the right stuff right off the bat. -
@coliver said in Point to Point radios - Payment card processing:
@scotth said in Point to Point radios - Payment card processing:
Access points will work fine. I'm doing discovery. Is there an application that requires that I use point to point vs APs that I lock down? Reminder: I may end up confronted with PCI issues down the road. For now, we'll be processing privately issued cards. If we move to fleet cards issued nationally, then I want to be thorough before we settle on a solution. I will never get a second chance correct without a lot of grief.
BTW, this is for a convenience store that has a 'captive' island for diesel sales to privately issued card holders.Providing the channel is encrypted with a reasonably strong cipher you should be good with PCI.
WUT?
Your AP channel has nothing to do with the data processing encryption.
You software should be all self encrypting before shit ever hits the transmission.
You can send CC over whatever you want as long as you prove the encryption happened somewhere. Granted most PCI talk about using TLS because they are just using standards. But again, that has nothing to do with the AP.
-
The card reader through to the processor is -- according to the vendor -- end to end encryption. If I setup an AP, turn off broadcast, turn up encryption, other than radios that I don't know about, what else is there?
Maybe that's my question. -
@scotth said in Point to Point radios - Payment card processing:
The card reader through to the processor is -- according to the vendor -- end to end encryption. If I setup an AP, turn off broadcast, turn up encryption, other than radios that I don't know about, what else is there?
Maybe that's my question.Again, WTF.
The AP has nothing to do with anything.
-
@jaredbusch said in Point to Point radios - Payment card processing:
@coliver said in Point to Point radios - Payment card processing:
@scotth said in Point to Point radios - Payment card processing:
Access points will work fine. I'm doing discovery. Is there an application that requires that I use point to point vs APs that I lock down? Reminder: I may end up confronted with PCI issues down the road. For now, we'll be processing privately issued cards. If we move to fleet cards issued nationally, then I want to be thorough before we settle on a solution. I will never get a second chance correct without a lot of grief.
BTW, this is for a convenience store that has a 'captive' island for diesel sales to privately issued card holders.Providing the channel is encrypted with a reasonably strong cipher you should be good with PCI.
WUT?
Your AP channel has nothing to do with the data processing encryption.
You software should be all self encrypting before shit ever hits the transmission.
You can send CC over whatever you want as long as you prove the encryption happened somewhere. Granted most PCI talk about using TLS because they are just using standards. But again, that has nothing to do with the AP.
Right - sad thing is so many places make these ridiculous claims that the machines and network need to be completely separate from anything else on the world to be sure they are secure.
