Payment Card Industry (PCI) Solution

5.1 Deploy antivirus software on all systems commonly affected by viruses (particularly personal computers and servers).

The VPN-1 family provides integrated gateway-based antivirus within its VPN-1 UTM, UTM-1 Edge, and VPN-1 UTM Power solutions. This supplements the deployment of antivirus solutions on individual PCs and servers and enhances the coverage against threats.

Check Point Endpoint Security products provide the preemptive mechanisms needed to stop rapidly spreading virus attacks such as Blaster, MyDoom, and Sasser that may elude traditional signature-based antivirus mechanisms. Using a combination of desktop firewall and application controls, Check Point Endpoint Security products automatically terminate malware, remove spyware, block buffer overflow attacks, and secure employee use of instant messaging (IM) services. In addition, Check Point Endpoint Security can help enforce the use of antivirus solutions.

Check Point VARs, SIs, and business partners can provide consulting services to deploy Check Point solutions that address the requirements of this section, as well as interoperate with any antivirus solution that may already be currently deployed.

5.2 Ensure that all antivirus mechanisms  are current, actively running, and capable of generating audit logs.

Check Point Endpoint Security automatically updates antivirus and patches. In addition, Check Point Endpoint Security can enforce the use of antivirus solutions. With Check Point Endpoint Security, enterprises can ensure that all enterprise endpoints are protected by up-to-date antivirus mechanisms. Check Point Endpoint Security checks PCs for compliance with organizational network access policy before allowing them to connect to the network. It prevents PCs with outdated antivirus from connecting, and it can automatically update antivirus signature files and engines of any noncompliant company PCs. Check Point Endpoint Security ensures that both IT managed and guest PCs are secure before they are allowed to connect to the network, and it provides a wealth of log data and filterable reports that support audits and forensic analysis.

Check Point VARs, SIs, and business partners can provide consulting services to deploy Check Point solutions that address the requirements of this section as well as interoperate with any antivirus solution that may already be currently deployed.