PCI DSS - Payment Card Industry Data Security Standard

PCI was developed by several major credit card companies as a guide to help prevent credit card fraud, hacking, and various other security issues, for organisations that process credit card payments. Companies that store, process, or transmit credit card data, must be PCI compliant, and pass an audit with a PCI DSS qualified security assessor in order to continue to process credit card information.

In general, the broad requirements of PCI DSS are:

Build and Maintain a Secure Network

Protect Cardholder Data

Maintain a Vulnerability Management Program

Implement Strong Access Control Measures

Regularly Monitor and Test Networks

Maintain an Information Security Policy


The Snare Server and agents, in combination, provide the capability to monitor user and system activity on your networks, and validate your access controls. In addition, network vulnerability assessment components can assist in the process of regularly testing your systems and networks for vulnerabilities which may affect PCI compliance.

On installation, the Snare Server runs a configuration wizard, which allows an administrator to install and configure objectives which are specifically targeted to address PCI Data Security Standard requirements.

---

Snare provides a central collection, analysis, reporting and archival capability for a variety of operating systems, appliances, and servers, including:
Windows NT/2000/XP/2003	Linux	Solaris	AIX	Irix
Tru64	ACF2	RACF	CISCO Routers / IOS	CISCO 6500 Firewall
CISCO Pix Firewall	CyberGuard Firewall	CheckPoint Firewall 1	Gauntlet Firewall	Netgear Firewall
Netgear Router	Netscreen Firewall	Nortel VPN devices	IPTables Firewall	Microsoft ISA Server
Microsoft IIS Server	Microsoft FTP Server	Microsoft Exchange Server	Microsoft Chat Server	Microsoft Proxy Server
Apache	Squid	Point of Sale terminals (POS)	Lotus Notes	Snort NIDS
IBM Socks Server	Universal Log Format	Generic Syslog Data