RE: File Integrity Software - PCI

["Sheldon Malm" <smalm () ncircle com>]

Apologies in advance if this comes off as shameless self-promotion ...

I replied to Amy offline already, but feel free to check out File Integrity Monitoring in our (nCircle's) CCM product.  
It's agentless, appliance-based, and a number of enterprise customers are using it ... with many using it specificially 
for PCI Compliance efforts.


Sheldon Malm
Director
Security Research and Development
nCircle Network Security

http://blog.ncircle.com
 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of H. Kurth Bemis
Sent: Monday, November 10, 2008 3:25 PM
To: Steve Freeman
Cc: amatachick () gmail com; security-basics () securityfocus com
Subject: RE: File Integrity Software - PCI

If you look at tripwire, look at "aide" as well.
~k


On Mon, 2008-11-10 at 12:08 -0500, Steve Freeman wrote:
> Try Tripwire. We used it to provide the audit requirement for our Windows
> PCI environment. I believe there is a free version, we used the Enterprise
> version. Passed compliance the first go round.
>
> Steve
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of amatachick () gmail com
> Sent: Monday, November 10, 2008 10:25 AM
> To: security-basics () securityfocus com
> Subject: File Integrity Software - PCI
>
> I imagine some other people out there are going through PCI Compliance
> issues as well right now. If that includes you, I could use your help. I'm
> trying to find a good file integrity software choice that allows for all the
> necessities needed for PCI compliance. I was trying to get our network team
> to use Samhain but they rejected that saying it was too hard to setup. Does
> anyone have any ideas on something easy to setup in a Windows environment?
> It doesn't need to be a free product. 
>
> Thanks in Advance!!
>
> Amy