Virtual Systems (VSYS) PCI Compliancy

[jeff6strings]

Are Virtual Systems (vsys) in the Palo Alto firewall PCI compliant?

Thanks for any help.

Jeff

[pulukas · Accepted solution]

PCI requirements are higher level than specific implementations like vsys.  The vsys can play a role in acheiving the required segmentation of network segements when meeting the PCI standards for data handling and transport.  But other techniques can also be used as well.

You just need to demonstrate to your auditor that the required segmentation is in place in your network architecture.

[reaper]

there's a PCI compliance whitepaper you can review

I'm not fully familiar with PCI, could you share some details what you're looking for exactly ?

thanks!

Tom

[jeff6strings]

Reaper,

Thanks for the reply. Looking for insight, experience, etc.. with Payment Card Industry (PCI) compliancy when using the virtual systems (vsys). If anyone has had non-compliant issues when using them.

Jeff

[pulukas · Accepted solution]

PCI requirements are higher level than specific implementations like vsys.  The vsys can play a role in acheiving the required segmentation of network segements when meeting the PCI standards for data handling and transport.  But other techniques can also be used as well.

You just need to demonstrate to your auditor that the required segmentation is in place in your network architecture.

[jeff6strings]

Thank you.