This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to make comply for PCI DSS SCan

Afternoon

I have a customer failing PCI DSS with the below. obviously all address the application ports, but how do I get on with the exposed SSL VPN ? (port 444)

router = XGS2100 (SFOS 20.0.1 MR-1-Build342)

any pointers please?

This thread was automatically locked due to age.

Top Replies

Vivek Jagad 3 months ago in reply to Simon Wilks +1 verified

Not having a SSL certificate can weaken your web application's security, data breaches and phishing attacks...

Parents

0 Vivek Jagad 3 months ago

Hi Simon Wilks ,

Thank you for reaching out to the community, please refer - Sophos Firewall: Required configuration for PCI DSS compliance.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Wilks 3 months ago in reply to Vivek Jagad

Thanks i saw this, I was already at tls1.2 "wide compatability"

I dont have a SSL certificate on the router - could this be issue ?
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad 3 months ago in reply to Simon Wilks

Not having a SSL certificate can weaken your web application's security, data breaches and phishing attacks...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Reply

+1 Vivek Jagad 3 months ago in reply to Simon Wilks

Not having a SSL certificate can weaken your web application's security, data breaches and phishing attacks...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data