Dell PowerConnect W Airwave 7.1, Руководство пользователя

Страница: 76 / 334

76 | Configuring AWMS Dell PowerConnect W AirWave 7.1 | User Guide
Enabling or Disabling PCI Auditing
Perform these steps to verify status and to enable or disable AWMS support for PCI 1.2 requirements. enabling
one or all PCI standards on AWMS enables real-time information and generated reports that advise on Pass or
Fail status. The PCI auditing supported in AWMS is reported in
Table 36 .
1. To determine what PCI Compliance standards are enabled or disabled on AWMS, navigate to the
AMP Setup > PCI Compliance page, illustrated in Figure 38 .
Figure 38 AMP Setup > PCI Compliance Page Illustration
2. To enable, disable, or edit any category of PCI Compliance monitoring in AWMS, click the pencil icon next
to the compliance category you wish to change. The Default Credential Compliance page displays for the
respective PCI standard.
3. Create changes as required. Specific credentials can be cited in the Forbidden Credentials section of any Edit
page to enforce PCI requirements in AWMS. Figure 39 illustrates one example.
2.1.1 Changing vendor-supplied defaults for wireless environments
When Enabled: A device fails requirement 2.1.1 if the passphrases, SSIDs, or other security-related
settings are on a list of forbidden values that AWMS establishes and tracks. The list includes common
vendor default passwords. The user can input new values to achieve compliance.
When Disabled: When this PCI requirement is disabled in AWMS, then network devices are not
checked for forbidden information and PCI Compliance is not established.
4.1.1 Using strong encryption in wireless networks
When Enabled: PCI Requirement 4 establishes the standard by which payment cardholder data is
encrypted prior to transmission across open public networks. PCI disallows WEP encryption as an
approved encryption method after June 20, 2010. A device fails requirement 4.1.1 if the desired or actual
configuration reflect that WEP is enabled on the network, or if associated users can connect with WEP.
When Disabled: When this PCI monitoring function is disabled in AWMS, then AWMS cannot establish
a pass or fail status with regard to PCI encryption requirements on the network.
11.4 Using intrusion-detection or intrusion-prevention systems to monitor all traffic
When Enabled: AWMS reports pass or fail status when monitoring devices capable of reporting IDS
events. Recent IDS events are summarized in the PCI Compliance report or the IDS Report.
When Disabled: When this function is disabled, then AWMS does not monitor the presence of PCI-
compliant intrusion detection or prevention systems, nor can it report Pass or Fail status with regard to
IDS events.
Table 36 PCI Requirements and Support in AWMS
PCI Requirement Description