#Micro focus reflection install#
#Micro focus reflection windows#

But protocols such as FTP, which are considered risky, require justification and documentation to be allowed through the firewall. Section 1.1 of the PCI DSS documentation specifies that certain protocols-including Secure Sockets Layer (SSL) and Secure Shell (SSH)-may pass through the firewall without special justification or documentation.

#Micro focus reflection install#

Requirement 1: Install and Maintain a Firewall Configuration to Protect Cardholder Data These technologies and methods help to ensure that files containing sensitive information cannot be accessed by unauthorized users and are encrypted before they enter the network. Reflection Secure FTP clients, included with the Reflection emulation products, also support a variety of encryption technologies and authentication methods. With this support, security officers can feel confident that both user account credentials (such as passwords) and sensitive information (such as cardholder data) will be encrypted as they pass between the host and the terminal emulation screen.

#Micro focus reflection windows#

Reflection solution: Reflection for Windows and Reflection for the Web terminal emulators support a variety of encryption technologies (including SSH and SSL/TLS) and authentication methods (such as Kerberos) that match the capabilities enabled on the host system. The user IDs and passwords used to gain access to host systems, as well as the sensitive information passing between the workstation and the host system, all need protection from prying eyes while in transit. Users and system administrators frequently rely on client-based utilities for accessing host applications and files.

By enabling the configuration of audit logging, Reflection for Secure IT delivers key information (who accessed the system through the SSH server and when) to standard logging facilities on the host system. Reflection for Secure IT also performs another critical security function-tracking access, including access with administrator privileges, to system components.

With Reflection for Secure IT servers, you can build secure, encrypted tunnels for data in motion-including communications from client-based emulators, file transfer utilities, or any application that uses the TCP/IP protocol. Reflection solution: Reflection for Secure IT is a family of Secure Shell clients and servers for Windows and UNIX.

Due to the sensitive nature of the data, organizations need to restrict access to this data and encrypt it as it travels over the network. Host systems may also be file servers holding cardholder data in files that need to be transferred over public networks. Host systems store cardholder data and run applications that enable access to that data.