PCI Scan Passed!
This might not seem like a huge deal to some, but we just passed our first PCI vulnerability scan. These little Mikrotik routers (using RouterOS) really know how to rock!
Out of our current 19 public interfaces, we did have a single one that responded via ICMP. It was more or a less bad timing on our part because performing support on the machines behind the routers isn’t perfected yet, so we have to go in and disable bottom drop-rules for a few minutes to get in. Packet filtering is still active and unwanted traffic won’t come through, but it did allow that router to talk back and announce its existence — unlike the rest of the stoic batch.
One more big step out of the way…
Categories: Security
Congrats on that. If you need help, I’d be glad to freelance.
Came across your blog due to the strange phenomenon that is twitter. Glad to see other companies are actually implementing PCI standards and following through with them.
Hey Ben – just catching up on your blog, know the PCI audits are a pain so good on you
Thanks and they certainly are. All in all it’s been 2 years of catchup for a company that had minimal security infrastructure. While PCI got me funding for dozens of pet projects that I wanted (VPN’s, perimeter firewalls, etc.), managing it and making sure the new polices are being followed is a bear all by itself.
At any rate, it’s great resume fodder should I want to grow in the infosec realm (which I do).