Re: Linux Servers and Antivirus

[Harry Hoffman <hhoffman () IP-SOLUTIONS NET>]

Hmm, I don't know about whether or not those requirements (5.1 and 5.2) 
allow for compensating controls.

Let's ask a QSA, I expect no less then 3 answers ;-)

On 06/22/2012 02:12 PM, Valdis Kletnieks wrote:
> On Fri, 22 Jun 2012 13:11:21 -0400, Harry Hoffman said:
> > PCI standards require A/V on servers that process transactions... it's
> > more and more likely those servers are running a *nix variant.
>
> Does it *require* A/V, or is it "A/V or compensating controls"?