Educause Security Discussion mailing list archives

Re: mobile POS system


From: Bill Terry <wterry () BARD EDU>
Date: Tue, 5 Aug 2008 11:16:21 -0400

Mark -
If you are not already doing PCI, you are significantly better off not
doing it yourself.

That being said, wireless and PCI do not really mix.  However, you might
consider using an IPSec tunnel configured specifically for only the PCI
mobile connection.  The Cisco VPN would work here.  Once you get to your
wired network you still have to address all other PCI requirements.  And
you should convince yourself that the IPSec solution will meet PCI
requirements.

Bill Terry

Assoc. Dean of Information Services & CTO
Henderson Computing Resources Center
Bard College
PO Box 5000
Annandale-on-Hudson, NY 12504-5000

845-758-7495 work
845-758-7035 fax


Mark Monroe wrote:
Does anyone out there support mobile POS systems with PCI compliance? If
so, what systems are you running, how do you handle the wireless
networking, and what restrictions do you have on it?

I have all of the official PCI guidelines, it just seems that wireless
and pci do not really mix.

Thank You,

Mark Monroe

Current thread: