Linking your business to more business.

Caught between PCI-DSS compliance mandates and a shrinking budget?

Use our quick contact form above and we'll show you how to become PCI-DSS complient on a seriously tight budget!

Still looking for more conventional answers? Here are some possible resources for PCI-DSS...

http://www.watchguard.com/
of businesses worldwide. Our best-selling Firebox X family of unified threat management UTM solutions leads the industry and the WatchGuard SSL 500 and SSL 1000 make secure remote access easy and affordable regardless of your network size. The new enterprise-ready WatchGuard...

http://tssci-security.com/
a commercial WAF as a short-term fix.Posted by Marcin on February 5th 2009 in People Security. Comments 0 RSSIntroducing SSLFail.com Hey all Id like to introduce all of you to a new site Tyler Reguly and I along with Romain... and Jay Graver set up last week SSLFail.com. The sites purpose is to point out the failures in various sites SSL implementations. Well be publishing tutorials and informative articles on SSL in addition to pasting screenshots of high profile sites failures.... purpose is to point out the failures in various sites SSL implementations. Well be publishing tutorials and informative articles on SSL in addition to pasting screenshots of high profile sites failures. We came up with the idea for the site when...

http://www.watchguard.com/infocenter/whitepapers/pci_dss.asp?t=pci_shout
Bundles XTM 10 Series Firebox X Peak e-Series Firebox X Core e-Series Firebox X Edge e-Series WatchGuard 3G Extend WatchGuard SSL UTM Software Suite spamBlocker Gateway AVIPS WebBlocker Model Upgrades Fireware Pro Edge ProNot sure where to start Talk to a...

http://paloaltonetworks.wordpress.com/2009/02/17/a-waf-does-not-make-you-pci-com
network who is using it and the associated threats is the basis of all firewall security policies including access control SSL decryption threat prevention and URL filtering. Key attributes of Palo Alto Networks next-generation firewall Designed to be a primary...

http://t-rob.net/2009/01/26/choosing-a-pci-dss-auditor-does-wmq-awareness-count/
hard to find one that had enabled SSL on their WMQ channels. Even now that we are starting to see SSL enabled most MQ installations still leak administrative access like a sieve. This is unfortunate because as was seen first with...

http://www.zendzign.com/
2008under Debian Linux Security UbuntuTags Debian openssl Security UbuntuA weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness certain encryption keys are much more common than they...

http://www.theenterprisecloud.com
firewalls and private VLAN architecture provide a secure network infrastructure. All connections to the Infinicenter management console are secured by SSL and a VPN connection is required to connect directly to servers via the Infinicenter console. Finally our team of security...

http://www.rbslynk.com/media/news_media4.htm
Discover MasterCard Worldwide Visa International and Visa USA. Trustwave is a leading certificate authority with thousands of secure sockets layer SSL certificates issued. Trustwave is headquartered in Chicago with offices throughout North America South America Europe the Middle East Africa Asia...

http://darkreading.com/blog/archives/2009/02/pci_dss_is_a_pr.html
phishing malware worm hacker firewall encryption VPN intrusion prevention intrusion detection wireless security network access control authentication exploits threat vulnerabilities SSL compliance regulation penetration test buffer overflow rootkit insider threat data leak data loss prevention cyber war cyber crime application security...

http://holisticinfosec.blogspot.com/
SlashdotPosted by Russ McRee at 908 PM 3 commentsLabels CSRF PCI pci dss Russ McRee vulnerabilities XSStoolsmith article on Adito SSL VPN now availableMy toolsmith column in the March 2009 issue of the ISSA Journal is a comprehensive discussion on Adito... fantastic offering that is now enjoying enhanced development support and offers many of the feature youd expect from a commercial SSL VPN solution. Check it out at your earliest convenience. Cheers. del.icio.us digg Submit to SlashdotPosted by Russ McRee... sitechase.com -www The second result caught my eye immediately as it 1 should likely be disallowed via robots.txt. 2 utilized SSL indicating a certain value. 3 indicates broker web access and thus must be important. At first glance the SunGard Broker...

http://blog.tenablesecurity.com/2008/10/pci-dss-plugins.html
data containing credit card or customer information. PCI Requirement 4 Nessus and the Passive Vulnerability Scanner can identify all SSL daemons and many different types of encrypted protocols. PCI Requirement 5 Nessus can identify the running anti-virus solution and...

http://nickcoblentz.blogspot.com/2009/02/pci-compliance-and-cloud-computing.html
and other security parameters This section concerns default passwords disabling unnecessary services secure configuration of components and the use of SSL. Most of this information applies to the virtual infrastructure. However item 2.4 and Appendix A list requirements that apply to... in Struts 2 - Part 1 CSRF Prevention in Struts 2 Custom Error Pages in Struts 2 October 2 SSLTLS in Struts 2 HTTP Caching Headers in Struts 2 September 1 JSESSIONID Regeneration in Struts 2 August 5...