Re: Telnet concerns from auditors

[macwheel99@xxxxxxxxxx]

Thanks to David Gibbs introducing me to Linked in, I made this contribution 
to a Linked in Security group.
http://packetfocus.com/proactive/index.php?topic=5.0

I highly reccommend reading both the LEGAL implications of PCI, and the 
lauhdry list of what went wrong at TJX MAXX.  

Security involves a lot of different systems working together as a team, 
where the weak link might be one PC with wireless port open, or upgrade to 
just about any application that leaves you vulnerable.


On Fri, 03 Oct 2008 14:38:02 -0500, David Gibbs wrote
> Adam Glauser wrote:
> > I should probably add "on a public network" to the end of that.
>
> True, but the encryption issues I've been hearing about have nothing 
> to do with the network being open to the public.
>
> Take a look at the PCI (credit card industry) requirements ... they 
> mandate secure authentication (if not traffic) on internal networks.
>
> david
>
> -- 
> IBM i on Power - For when you can't afford to be out of business
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) 
> mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To 
> subscribe, unsubscribe, or change list options, visit: 
> http://lists.midrange.com/mailman/listinfo/midrange-l or email: 
> MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment 
> to review the archives at http://archive.midrange.com/midrange-l.


--
WOW! Homepage (http://www.wowway.com)