Re: Telnet concerns from auditors

Thanks to David Gibbs introducing me to Linked in, I made this contribution
to a Linked in Security group.
http://packetfocus.com/proactive/index.php?topic=5.0

I highly reccommend reading both the LEGAL implications of PCI, and the
lauhdry list of what went wrong at TJX MAXX.

Security involves a lot of different systems working together as a team,
where the weak link might be one PC with wireless port open, or upgrade to
just about any application that leaves you vulnerable.


On Fri, 03 Oct 2008 14:38:02 -0500, David Gibbs wrote

Adam Glauser wrote:

I should probably add "on a public network" to the end of that.

True, but the encryption issues I've been hearing about have nothing
to do with the network being open to the public.

Take a look at the PCI (credit card industry) requirements ... they
mandate secure authentication (if not traffic) on internal networks.

david

--
IBM i on Power - For when you can't afford to be out of business
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options, visit:
http://lists.midrange.com/mailman/listinfo/midrange-l or email:
MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment
to review the archives at http://archive.midrange.com/midrange-l.

--
WOW! Homepage (http://www.wowway.com)