<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Sorry, hit send before it was time. </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
The PCI 3.0 requirement is :</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
1.2.2 Secure and synchronize router configuration files. </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
1.2.2.a Examine router configuration files to verify they are secured from unauthorized access.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
1.2.2.b Examine router configurations to verify they are synchronized—for example, the running (or active) configuration matches the start-up configuration (used when machines are booted)</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
While the running (or active) router configuration files include the current, secure settings, the startup files (which are used when routers are restarted or booted) must be updated with the same secure settings to ensure these settings are applied when the
start-up configuration is run. Because they only run occasionally, start-up configuration files are often forgotten and are not updated. When a router re-starts and loads a start-up configuration that has not been updated with the same secure settings as those
in the running configuration, it may result in weaker rules that allow malicious individuals into the network.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="widows: 1;"><font color="#333333" face="Arial,sans-serif"><span style="line-height: 18px;">Unless I’m missing something, that’s all our auditor told us we need to be concerned with. TAC+ handles all of it nicely. </span></font></div>
<div><br>
</div>
<div><span style="widows: 1;"><font color="#333333" face="Arial,sans-serif"><span style="background-color: rgb(254, 253, 253);"><span style="line-height: 18.1818180084229px;"> </span><span style="line-height: 18px;">—</span><span style="line-height: 18.1818180084229px;"> Matt</span></span></font></span></div>
<div><span style="widows: 1;"><font color="#333333" face="Arial,sans-serif"><span style="background-color: rgb(254, 253, 253);"><span style="line-height: 18.1818180084229px;"><br>
</span></span></font></span></div>
<div><span style="widows: 1;"><font color="#333333" face="Arial,sans-serif"><span style="background-color: rgb(254, 253, 253);"><span style="line-height: 18.1818180084229px;"><br>
</span></span></font></span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Matt Almgren <<a href="mailto:matta@surveymonkey.com">matta@surveymonkey.com</a>><br>
<span style="font-weight:bold">Date: </span>Friday, July 24, 2015 at 1:28 PM<br>
<span style="font-weight:bold">To: </span>"Chase, John" <<a href="mailto:john.chase@rakuten.com">john.chase@rakuten.com</a>>, "<a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a>" <<a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [tac_plus] TACACS Solution?<br>
</div>
<div><br>
</div>
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>That’s an interesting question. TAC+ s the medium/method that is used as the medium for the PCI requirement. </div>
<div><br>
</div>
<div>PCI states that configurations have to be backed up to a secure location. There’s no mention of “what” software is used, as long as the above holds true. </div>
<div>
<div><br>
</div>
<div><span style="color: rgb(51, 51, 51); font-family: Arial, sans-serif; line-height: 18.1818180084229px; widows: 1; background-color: rgb(255, 255, 255);">1.2.2 Secure and synchronize router configuration files.</span></div>
<div><br>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><Chase>, John <<a href="mailto:john.chase@rakuten.com">john.chase@rakuten.com</a>><br>
<span style="font-weight:bold">Date: </span>Friday, July 24, 2015 at 12:48 PM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a>" <<a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a>><br>
<span style="font-weight:bold">Subject: </span>[tac_plus] TACACS Solution?<br>
</div>
<div><br>
</div>
<div>
<div>
<div>Good day I am in preparation of replacing our existing Cisco TAC product with something new due to the EOL of Windows 2003. I was wondering if your TAC_Plus solution is PCI compliant?</div>
<div><br>
</div>
<div>Thank you</div>
<div><br>
</div>
<div>John Chase</div>
<div>Rakuten USA, Americas Development Unit</div>
<div>System Administrator</div>
<div>85 Enterprise | Suite 100</div>
<div>Aliso Viejo, CA 92656</div>
<div>P: 949.448.5461</div>
<div>[Description: Description: Description: Z:\Rakuten USA\rakuten_logo R.jpg]</div>
<div>NOTICE: This email contains confidential and/or proprietary information, some or all of which may be legally privileged. It is intended only for the named recipient. If an addressing or transmission error has misdirected the email, please notify the author
with a reply email message. If you are not the named recipient, you must not use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.</div>
<div><br>
</div>
<div><br>
</div>
<div>-------------- next part --------------</div>
<div>An HTML attachment was scrubbed...</div>
<div>URL: <<a href="http://www.shrubbery.net/pipermail/tac_plus/attachments/20150724/7eefb81b/attachment.html">http://www.shrubbery.net/pipermail/tac_plus/attachments/20150724/7eefb81b/attachment.html</a>></div>
<div>-------------- next part --------------</div>
<div>A non-text attachment was scrubbed...</div>
<div>Name: image001.jpg</div>
<div>Type: image/jpeg</div>
<div>Size: 2533 bytes</div>
<div>Desc: image001.jpg</div>
<div>URL: <<a href="http://www.shrubbery.net/pipermail/tac_plus/attachments/20150724/7eefb81b/attachment.jpg">http://www.shrubbery.net/pipermail/tac_plus/attachments/20150724/7eefb81b/attachment.jpg</a>></div>
<div>_______________________________________________</div>
<div>tac_plus mailing list</div>
<div><a href="mailto:tac_plus@shrubbery.net">tac_plus@shrubbery.net</a></div>
<div><a href="http://www.shrubbery.net/mailman/listinfo/tac_plus">http://www.shrubbery.net/mailman/listinfo/tac_plus</a></div>
<div><br>
</div>
</div>
</div>
</span></div>
</div>
</span>
</body>
</html>