background image

Irate about Pirates? 

Under the Berne Convention, how long does copyright exist on a photograph?

 

Page 44 of 45 

Central Management System

B.6 

PCI Compliance

The Mako System is powered by Mako Networks Ltd, a certified Payment Card Industry Data Security 

Standard (PCI DSS) Level 1 Networking and Security Service Provider. This means that you can easily 

meet the requirements of PCI DSS compliance.
The PCI DSS rules have been designed to protect banks, merchants and cardholders from falling victim 

to credit card fraud. PCI DSS outlines how a merchant should protect their point of sale network and 

ensures security is maintained on an ongoing basis.
The Mako System lowers the cost and complexity of PCI DSS compliance by automating network 

security and nearly every other process of a merchant's PCI DSS compliance.
With proactive alerts, merchants using the Mako System cannot mistakenly put themselves at risk of 

non-compliance. Any attempt to inappropriately modify the network configuration will generate a 

warning and require the user to confirm the modification by entering an authorising password.
Through Mako Networks, Mako provides a QSA-designed website which can deal with almost all 

remaining aspects of merchant PCI DSS (documentation, policy and process), leaving the merchant only 

having to take care of physical security.
The Mako system is the solution for card-present merchants transacting over IP, providing peace of mind 

to cardholders, merchants and their banks. The Mako System enables a merchant to more easily comply 

with all of their PCI DSS obligations. Many merchants lack the technical knowledge required to correctly 

implement the PCI DSS requirements and buying in that experience is expensive using traditional 

solutions.

B.7 

VPN

Virtual Private Networks allow you to assign secure remote access to your networks over the Internet. 

You can link 2 Mako-protected networks together using the CMS in seconds, using only 3 mouse-clicks!
Linking 3 or more Mako-protected networks is just as easy. The CMS allows this to happen without static 

IP Addresses. In the same way you can also allow specified users remote access to your Mako-protected 

networks with the Remote VPN feature – A useful feature for accessing your networks whether you're 

home or away.

B.8 

Proactive Alerts

The Mako CMS automatically provides proactive alerts for extraordinary usage, unit offline, worm 

detection and hardware triggers such as fan speed and CPU temperature. The CMS also sends monthly 

reports on usage, intrusion attempts and easy-to-read companywide summaries for end-users with 

multiple sites.

B.9 

Logging/Reporting

While all traffic from your CPE goes directly out onto the Internet, your CPE sends traffic information 

securely to the CMS. This analysis gives you the ability to monitor and control your Internet usage, using 

any PC from any worldwide location. Simply log onto the CMS to see how your business's broadband 

Internet connection is being used, by whom and whether this was for personal or business use, monitor 

where PCs on your network have been going and much more.

B.10 

24-Hour Remote Control

Because your CPE uses the CMS, you or your designated IT Professional have 24-hour secure remote 

control over your connection to the Internet. Via the CMS you can modify firewall rules, create and 

disable VPNs, check usage patterns and even change your networks IP Addressing.

B.11 

Automatic Updates

Mako automated software and firmware upgrades mean that new services and increased functionality 

are added to the platform on an ongoing basis. Mako software is proactively patched and updated 

immediately upon authentication and availability, providing unparalleled reliability and security without 

Содержание 6500

Страница 1: ...Management Home Company Search MN_CMS0001_MK_A4...

Страница 2: ...Page 2 of 45 Central Management System...

Страница 3: ...tion Send Invitation 30 6 4 VPN AddThird Party Device 31 6 5 VPN DeleteThird Party Device 31 6 6 VPN Remote Access Manage Access 31 6 7 VPN Remote Access AddVPN User 32 6 8 VPN Remote Access PPTP Sett...

Страница 4: ...Should Someone Else Be Reading This What s wrong with this IP address 202 12 324 4 Page 4 of 45 Central Management System...

Страница 5: ...CMS is always used with a CPE to provide reporting and configuration options via the hosted servers Your CPE CMS and the hosted management servers are referred to as the Mako System Internet Your CPE...

Страница 6: ...cally prompted to save changes This means navigating away from a screen without saving changes will result in no change to your system Save buttons are generally in the bottom right of a page and may...

Страница 7: ...er https in which traffic between the browser and the Central Management Servers is encrypted Your browser must accept cookies and must have JavaScript enabled to access the CMS website These properti...

Страница 8: ...d non PCI compliant for general internet traffic If you don t have a PCI template you have two still have two separate traffic routes with our entry level appliances For example one could be used for...

Страница 9: ...e submenus the shade gets darker and the options get indented slightly on the left n n The highlighted menu item is the open option Once selected the menu item on the left highlights reveals the subme...

Страница 10: ...r account access history and general info The top line gives you the user access details time and company you re operating under for this session Also here is Head Office The name of the selected CPE...

Страница 11: ...n Click your target CPE s radio button from this list The default selection will be the topmost CPE 4 1 1 Advanced Search Your network can be searched using each CPE s ID text n n Advanced Search Ente...

Страница 12: ...ays remember The CPE you are working with is listed in the Header bar of each page 4 4 List Filtering To filter your results by Online Offline or Awaiting Connection status categories n n In the CPE S...

Страница 13: ...ou ve selected a CPE in the Selection menu you may change its parameters Your ability to configure CPEs may be restricted Please consult your reseller if you encounter any difficulties The over arcing...

Страница 14: ...for you It tells your carrier what type of network gateway your system should use 5 1 2 PPP Account Settings The following options apply if your CPE is connected via PPP PPP is used for an ADSL confi...

Страница 15: ...t If this is selected and the threshold is reached your Internet connection will be cut off when this threshold is reached It can be reactivated with manual intervention but your connection will remai...

Страница 16: ...mmend testing this failover ability occasionally outside of your business hours To configure cellular failover for your CPE Cellular cannot be used as the primary ISP mode n n Check the Enable Cellula...

Страница 17: ...andwidth ISP plan This threshold alert helps manage your DAILY traffic while the ISP Setup page will contain MONTHLY threshold warnings 5 3 2 Worm Alerts Your CPE automatically detects PCs on your net...

Страница 18: ...de you with multiple IP addresses this page won t be available 5 4 1 Existing IP Ranges IP Range The subnet mask of allowable addresses in CIDR notation Start End Address The first 3 significant numbe...

Страница 19: ...eny and should only be enabled for troubleshooting Mako Ethernet IP address The selected LAN port must be given a fixed IP address on your network This is set to a default value of 192 168 1 254 for y...

Страница 20: ...be limited by the defined subnet mask The range is also dependent on the defined Mako Ethernet IP address if entered incorrectly or the wrong range is used this will create an error alert WINS Server...

Страница 21: ...inished 5 5 3 Other considerations Please take careful note of all caution messages These messages will vary depending on the situation You need to be aware of these messages and amend the situation i...

Страница 22: ...l delete or edit details of each VLAN by clicking the appropriate Option icon New VLAN Configuration Enter details for a new VLAN and be sure to click Add New VLAN when finished VLAN Name Provide a br...

Страница 23: ...Network Specifies if users are able to see this Wireless LAN when searching for networks or if they have to know the name of the network before they can join Hidden networks offer additional security...

Страница 24: ...reseller and changes shouldn t be necessary When enabled the CPE s DHCP server issues IP information to all new PCs connected to the network 5 10 1 Adding a DHCP Lease Manual Method n n Enter all the...

Страница 25: ...hanges to permissions which deny access tend to improve network security n n Changes which allow access tend to weaken network security Changes to permissions should therefore specify the permitted ac...

Страница 26: ...By default Outbound traffic is set to Allow Intranet Security relates to CPEs having multiple LAN ports The Intranet firewall enables you to control access between the local networks The default setti...

Страница 27: ...Intranet Only Set your Action to Allow or Deny n n Enter a Comment to describe the rule Add when finished Refresh to update your Firewall rules 5 13 3 Advanced The Advanced sections allows you to con...

Страница 28: ...n be used to label or describe the rule Here one of the rules operating on the firewall is shown as having been created on the Inbound Rules Advanced page 5 13 6 VPN Specifics Before you can add rules...

Страница 29: ...p menu n n Choose access rights over the VPN link with the radio buttons 1 The PCs connected to the Destination CPE can see those PCs connected to your Home CPE but not the reverse 2 Your Home CPE PCs...

Страница 30: ...e email address of the other Mako s administrator n n Select which LAN you want to be your part of the VPN n n Choose the direction of the VPN n n Enter the email address of the Destination Mako s Adm...

Страница 31: ...y clicking random If the security of this network isn t as important to you you can leave this field blank Add or Add and Create VPN when finished If you click Add and Create VPN this will take you ba...

Страница 32: ...must use to provide a secure wrapping for their link to your office network See the Help documentation on how to use Remote VPN for specific IPSec or PPTP VPN Client software 6 7 VPN Remote Access Add...

Страница 33: ...nd bandwidth allocations QoS can be used to improve the quality of such services as Voice over IP traffic by ensuring there is always bandwidth reserved for it and that it has priority over less deman...

Страница 34: ...PCI DSS Level 1 Networking and Security Service which allows you to easily overcome the issues of PCI DSS compliance The Mako series features network segregation The isolated network can be configured...

Страница 35: ...7 Configure Location The Location section allows you to update and view the non technical details of your CPE n n Click Edit A pop up window allows you to edit your CPE s details Save when finished 7...

Страница 36: ...ome from Page 36 of 45 Central Management System 7 9 Configure Access Email Settings The Email Settings page lets you choose which users receive email reports from the Mako System n n Select your repo...

Страница 37: ...give you alternate navigation through the Management section For this section we continue to use the left menu navigation convention 8 2 Management Company Search n n Enter a Company name here to list...

Страница 38: ...tomise Reports This page allows you to customise the look of 4 reports Company wide Summary End of Month Sharknet IDS Report and PCI DSS Information n n Select the report you wish to customise You ll...

Страница 39: ...ished Delete User Remove the user from the system Change Username Enter a new username Change Username when finished The Company section lists the companies to which the user account is affiliated You...

Страница 40: ...ent System 9 Help This section provides access to the people products and documentation for your network 9 1 Help Help Contacts This page contains the technical contact details for your company and it...

Страница 41: ...ord n n If you lose the password you are unable to obtain help from the website obtain traffic reports or update your Firewall configuration n n If the password is exposed to a third party your comput...

Страница 42: ...an Asynchronous Transfer Mode ATM cell is to travel over a network AuthType Choose the authentication type from the drop down menu Password Authentication Protocol PAP 2 way handshake or Challenge Han...

Страница 43: ...he Internet or connections between sites with this CMS The CMS allows you to modify firewall rules connect sites via VPNs check usage patterns and even change your network s IP addressing B 3 Patented...

Страница 44: ...Virtual Private Networks allow you to assign secure remote access to your networks over the Internet You can link 2 Mako protected networks together using the CMS in seconds using only 3 mouse clicks...

Страница 45: ...nsite visits or technically literate users Mako Diagnostics reduces support costs by allowing the helpdesk to very quickly identify and resolve problems all the way to the Mako appliance level B 12 Op...

Страница 46: ...affic limit reached n n Licence expiry n n Dynamic DNS activity n n CPE temperature CPE The SecureME appliance may also be referred to as the Customer Premise Equipment CPE DHCP Dynamic Host Configura...

Страница 47: ...e filters it is not allowed through In short it provides a strong first line of defence from the following types of attacks n n Remote login remotely control your computer and access sensitive files n...

Страница 48: ...connectivity of an Ethernet LAN local area network to provide for additional computer connections This concept is fine in smaller LANs but may cause congestion in larger LANs where a switch which dir...

Страница 49: ...ers for example in a home or small office network or as many as thousands of users MAC address Media Access Control The unique hardware address of a machine s connection to a local area network Each N...

Страница 50: ...n language or protocol of the Internet It can also be used as a communications protocol in a private network either an intranet or an extranet Telnet A service which provides remote terminal login to...

Страница 51: ...ers MRU The Maximum Receive Unit MRU is the size of the largest packet the CPE will accept Increasing the MRU means larger incoming packets which in turn increases transmission errors as the whole pac...

Страница 52: ...optional but useful for diagnostics From your internal network type the IP address of your CPE eg http 192 168 1 254 into a browser D 2 System Information Mako ID The unique identifier of your CPE So...

Страница 53: ...address 202 12 324 4 Page 53 of 54 Central Management System Last User Change The last user modification to your CPE s configuration Firewall Status Shows whether the firewall is loaded or not Mako Gu...

Страница 54: ...it is red then this could be an indication that n n Your username and password are not being accepted by your ISP n n The CPE is still booting n n PPP cannot yet authenticate because the ADSL is not u...

Страница 55: ...procedures contained in Section 5 below and returns the MAKO NETWORKS LTD product that the end user considers defective for examination and testing 4 2 MAKO NETWORKS LTD shall not be liable under thi...

Страница 56: ...Support support makonetworks com Web site www makonetworks com...

Отзывы: