The sun's out, winds calm... 40F

@Dashrender said in how does this work? Modems/IPs/PCI Scans:

@scotth said in how does this work? Modems/IPs/PCI Scans:

I think that there's one more way. One firewall per network, both through the cable modem/router. Each is responsible for their own security. Any backoffice access is governed by the payment processor and security for the payment/processing side is provided by the payment processor.

This assumes you can get two ip from the isp.

You could also put one firewall behind the other. This happens a lot. The idea is to get the transaction(s) secure and to make absolutely sure that the PCI compliance is on the shoulders of the payment processor as much as possible. Audits are their responsibility. Remediation is their responsibility. Secure transactions are their responsibility.

EDIT: This does not exclude you (meaning anyone) from properly securing your own environment. Put the onus where it belongs.

I think that there's one more way. One firewall per network, both through the cable modem/router. Each is responsible for their own security. Any backoffice access is governed by the payment processor and security for the payment/processing side is provided by the payment processor.

@jt1001001 said in What Are You Doing Right Now:

Anyoen else have Spectrum issues? 2 out of 3 offices on Spectrum cable modems having intermittent connection/browsing issues. The offices on fiber are OK so far

We have 3 sites out of eastern ohio. All good so far today

xcp-ng.org Forum

Ask away. They'll steer you down the path.

It's a pure money grab. You have to buy this from us or we'll shut you off, because gubament

Earlier, he mentioned that his company's payment processor was pushing this on them.

@WrCombs said in WTF is a Managed Firewall?:

@scottalanmiller said in WTF is a Managed Firewall?:

@WrCombs said in WTF is a Managed Firewall?:

title says it all; Aren't all Firewalls Managed???

No, the majority are just abandoned. A managed firewall is a service by which a company manages a firewall.

so we have to hire a company to manage our firewall?

No

In our case, no we don't have to oursource our firewall management. We can, however, choose to opt in to a total package and allow the 3rd party contracted by the processor or brand to manage our firewalls... for a fee, of course. I can tell you, it's not cheap. If they manage the POS and everything involved with it, and we manage the remainder of the site, they are still responsible for secure transactions and remediation.

@WrCombs said in WTF is a Managed Firewall?:

@scotth said in WTF is a Managed Firewall?:

It could be managed by you or could be outsourced, ie. managed router from ISP. Is your credit card processor pushing this on you?

Yes, something about needing a managed firewall to be in Compliance

Not surprised. We have a hybrid environment with regard to our processors. They piggy back on our network and have internet access through our modem. They open a hole for us to do backoffice work locked down to specific IPs in our HQ and to a single PC on site. The remainder of our network is ours and is behind our firewall. I'm quite leery about giving our processor / brand franchiser total control over our devices, numbers, communications, phones, cameras, .... You get the picture.

Oh and @Dashrender is right. Very right.

@Dashrender said in What Are You Watching Now:

@scotth said in What Are You Watching Now:

Is that from Netflix?

No - Reddit.

Cool. Looks interesting. I remember seeing the original Westworld movie in the theater. I had to be accompanied by an somone older. It was PG or R. I can't remember.

It could be managed by you or could be outsourced, ie. managed router from ISP. Is your credit card processor pushing this on you?

Not exactly chicken and the egg, but, I think that GIFs came 1st

Is that from Netflix?

@scottalanmiller said in What Are You Drinking:

@scotth said in What Are You Drinking:

That's Boos Miller's drink from Return to Zork.

I'm Boss Miller. And it's my drink, too.

Return to Zork - Boos Miller Youtube short

My brother just had a 17kVA fail after 103 usage hours. He's not happy.

@jt1001001 We're close to 50/50 government/customer across all of our bulk plants. Interoffice we attempt to scan to a folder. I can't tell you how many times I saw someone print our a message and then FAX it. It sets my blood to boiling. If I mention that there's another, better, easier, more efficient, pleasing, justified way to do it, I get the 'that's nice, I'll do that next time' look. The owner has been pushing for better behavior. He seems to be getting good results. Hehe

Odd that when you run cleanmgr.exe, it doesn't seem to include c:\windows\temp

@scottalanmiller said in Any way to pass through pci fax modem in hyper-v:

@scotth said in Any way to pass through pci fax modem in hyper-v:

We got a quote for $800 / mo. for 3,000 FAXes / mo. -- approx 9,000 pages / mo. A few POTS lines and an Intermec Multitech FAX server paid for that rather quickly.
Sorry folks, but there are industries that will FAX no matter the opinion of others.

Not a horrible price, but supposedly way, way higher than the voip.ms price. Which is like $200-$270 supposedly.

Honestly, handing it off to a service doesn't bother me. If the price were under twice our costs, I could state a case for it. Beside the petroleum industry being still hard after FAXs, dealing with the government is still done with FAX..... a lot of FAXs.

We got a quote for $800 / mo. for 3,000 FAXes / mo. -- approx 9,000 pages / mo. A few POTS lines and an Intermec Multitech FAX server paid for that rather quickly.
Sorry folks, but there are industries that will FAX no matter the opinion of others.