Site Moved a PC=A MESS

scottalanmiller

@wrcombs said in Site Moved a PC=A MESS:

@scottalanmiller said in Site Moved a PC=A MESS:

@wrcombs said in Site Moved a PC=A MESS:

My boss was pushing the compliance issues, Yes, Because it is his job to make sure compliance is met within every site. You're telling me, If im not mistaken, That following directions coming from the vendor is my boss being Dumb? or Being an Ass?

Straight from PCI Data Security Standard: Build and Maintain a Secure Network:
1. Install and maintain a firewall configuration to protect cardholder data.
2. Do no use Vendor- supplied Defaults for system passwords and other security parameters .

I guess reading this more thoroughly so I could continue this conversation: no where does it say It has to be a separate or isolated network, Only that It needs to be behind a firewall as far as Networking is concerned.

Correct, I'm telling you, straight up, that if your boss claims that those words in ANY WAY suggest you can't use a VLAN, he's either insanely stupid, or a ridiculous liar who thinks you easy to push around.

There is NOTHING about a separate network there. Not one thing.

I understand that now, at first I was a little confused, but now having seen and looked into everything more based off of what you are telling me , I find that everything you are saying makes perfect sense

Not that it means you can do something about it. But knowing that the boss is most likely just trying to blow you off, or just trying to make things complicated for some personal reason at the expense of the company makes it far better to be able to at least learn from the scenario.

Your quality take aways here include...

Your boss is not to be trusted (why, we don't know, but a reliable source, he is not.)
Look for another job (you know this, but it's a reminder.)
You now know PCI far better than before (and better than your boss.)
You now have more experience in evaluating someone giving excuses rather than actual logic.