nobaloney
NoBaloney Internet Svcs - In Memoriam †
I've never found any PCI comliance checkers which weren't commercial products. The one we use is sold by McAfee.
Jeff
Jeff
Invalid security certificate error after installing SSL how to fix?
- Thread starter Shaw
- Start date
zEitEr
Super Moderator
Is McAfee solution something like http://checkpcidss.com/ or more functional? Have you ever tried this service (see the link)?
nobaloney
NoBaloney Internet Svcs - In Memoriam †
The McAfee and other solutions I've found are very different from this. I was hoping this would work, but it cares about things PCI compliance doesn't care about, and doesn't check many things it does. McAfee does an in-depth scan; it takes over an hour the first time, and gives an in-depth report with complete instructions (which of course don't always work for DirectAdmin-based servers) on mitigation.
Note this is not a recommendation for McAfee; it's just a note of my experience with their solution, which is not cheap.
As an example of it's thoroughnes, McAfee's solution even tells me about port 2222 being open on my server. It's not listed as serious, becaue I only use it with https, but it does explain about possible cross-site scripting, etc.
Jeff
Note this is not a recommendation for McAfee; it's just a note of my experience with their solution, which is not cheap.
As an example of it's thoroughnes, McAfee's solution even tells me about port 2222 being open on my server. It's not listed as serious, becaue I only use it with https, but it does explain about possible cross-site scripting, etc.
Jeff