Firewall hardware recommendations?

Question

Level 1

13 points

Firewall hardware recommendations?

I'm trying to meet security requirements to continue accepting credit cards for my very small (two person) business. I use an iMac with an Airport Extreme router but the Mac's firewall no longer meets the requirements of the security compliance scan for credit card transactions..

The latest communication from their support staff said: "Consider a separate firewall appliance seated behind the Internet Service Provider (ISP) modem and in front of the Cardholder Data Environment (CDE) where any/all traffic is being encrypted prior to leaving the firewall and passing through the upstream ISP supplied modem."

I take it to mean they want me to install a hardware firewall between the Airport Extreme and the credit card terminal used for processing card transactions. (I only process credit cards from a separate card terminal; I don't use my computer as a virtual terminal.)

Can anyone recommend such a device that is reasonably priced. I would like to keep the cost under $100.00 because I suspect I'm also going to have to hire someone to come and set it up and manage ports, connections (etc.) in order to meet the new standards for compliance.

I've read several reviews of routers that were also firewalls but they caused lots of problems with the network and I suspect putting in an additional router after the Airport Extreme router could cause a lot of issues I'm not savvy enough to even begin to understand let alone fix.

Thanks for your input--this community is great!

iMac, OS X El Capitan (10.11.6)

Posted on Aug 25, 2018 4:44 PM

Reply

Answer 1

Aug 26, 2018 3:52 AM in response to jblue2

Can anyone recommend such a device that is reasonably priced. I would like to keep the cost under $100.00 because I suspect I'm also going to have to hire someone to come and set it up and manage ports, connections (etc.) in order to meet the new standards for compliance.

You have the right idea..

Get security/network specialist in to help you.

They will dictate the hardware.. not you. It is really foolish to try and do this the other way around.. and I can speak from experience.. people buy boxes that a store sells as completely satisfactory which an expert will blink once and toss in the bin.

It is total cost that matters.. not hardware. Some people could use cheap routers.. like Ubiquiti which do indeed sell for $100.. but the cost is the expertise to configure it to meet a tight standard like CDE. And for that you will need to add at least a zero.

Reply

Answer 2

Bob Timmons

Level 10

185,138 points

Aug 26, 2018 3:53 AM in response to jblue2

Security is a job for a pro......a local IT guy who has experience working with business and credit card authorizations......who can design and implement a system based on your requirements. More importantly....someone who can fix things fast when they break.

You are going to need to jump from equipment designed for typical home use to hardware that is designed for business. I don't think that you will be able to even get started unless you multiply your budget by a factor of about 10 or more. Maybe another way to say the same thing.......Apple never used Apple routers at an Apple Store.

Start with your Internet Service Provider and ask them if they handle business level security. If they do, make an appointment to talk with a specialist. If they don't, they should be able to provide you with some names of other local business networking specialists who can help.

Edit.....I notice that LaPastenague has replied as well. Sorry for the duplication.

Reply

Answer 3

jblue2 Author

Level 1

13 points

Aug 26, 2018 3:55 AM in response to LaPastenague

I cannot thank you enough for taking the time to answer my question. I suspected as much but it is very helpful to have someone with knowledge and experience state this so clearly. Thank you for the help--you've answered my question and I especially appreciate how quickly you replied.

Reply

Answer 4

jblue2 Author

Level 1

13 points

Aug 26, 2018 3:59 AM in response to Bob Timmons

Please accept my thanks for taking the time to share your expertise and knowledge with me and believe me, I so appreciated hearing from two responders who voiced the same opinion; that just gives me a much greater assurance that this is not something I can do on my own.

Thank you so much. Your advice is invaluable and useful and very clearly written and understandable.

Reply

Firewall hardware recommendations?

Similar questions