Payment Card Industry (PCI) Solution

11.1-11.3 These sections are concerned with testing security controls and connections, running  vulnerability scans, and performing penetration testing. Check Point VARs, SIs, and business partners can provide consulting services to help provide the testing and scanning that can verify the proper deployment of Check Point solutions as required by sections 11.1-11.3.

11.4 Use network intrusion detection systems, host-based intrusion detection systems, and intrusion prevention systems to monitor all network traffic and alert personnel to suspected compromises. Keep all intrusion detection and prevention engines up-to-date.

SmartDefense and Web Intelligence technologies perform intrusion prevention as part of Connectra, Check Point Endpoint Security, and VPN-1 products.

Eventia Suite monitors network traffic and alerts personnel to suspicious activity and suspected compromises. Eventia Analyzer performs event correlation to detect and thwart complex security incidents that span multiple devices, which might otherwise go undetected.

SmartDefense Services allow enterprises to keep intrusion prevention engines updated.

11.5 Deploy file integrity monitoring software to alert personnel to unauthorized modification of critical system or content files; and configure the software to perform critical file comparisons at least weekly.

Check Point Endpoint Security develops an inventory of all network-seeking applications and collects MD5 hash values. Using these, administrators confirm legitimate applications. Also, they are alerted to new or unauthorized applications by Check Point Endpoint Security. Administrators can set rules to invoke actions for responding to unauthorized access attempts.

Check Point VARs, SIs, and business partners can provide consulting services to help ensure the file integrity monitoring of systems not directly coveredby Check Point solutions.