PCI-DSS Compliance with CSP PassPort

PCI-DSS Compliance with CSP PassPort

Authentication and authorization on Nonstop systems require a complex arrangement of basic Guardian file permissions, Safeguard globals, and optional object ACLs. These elements provide control over who can perform what actions on an object.

CSP PassPort is a comprehensive security product for controlling and auditing user access to HPE Nonstop systems.

It delivers user and command control, enforces password quality, and provides thorough session auditing, enhancing access management and security on HPE Nonstop systems.

CSP PassPort offers superior user authentication, command control, session control, accountability, and auditing capabilities not available with Guardian or Safeguard security.

Manage PCI-DSS Compliance Requirements

CSP PassPort provides important security features for Nonstop servers with or without Safeguard. While Safeguard provides a range of authorization and authentication controls, additional controls are required to manage how users logon to TACL and/or OSH, and what privileged commands can then be used. At the same time, once logged on, it is critical to control what activities may then be carried out.

CSP PassPort addresses some of the following PCI-DSS requirements:

• Requirement 7 Restrict access to cardholder data by business need-to-know
• Requirement 8 Identify and authenticate access to system components
• Requirement 10 Track and monitor all access to network resources and cardholder data
• Requirement 12 Maintain a policy that addresses information security for all personnel

 Designed for Nonstop Command Control

CSP PassPort provides comprehensive user and command control, password quality enforcement and auditing. It controls and filters user access to systems, programs and commands according to customized user profiles.

All user terminal input/output operations (including OSS) can be monitored via an easy-to-use GUI interface, while an audit process records all user activities.

Major Benefits:

• Limit user access to sensitive assets, programs and commands
• Provide access to resources/functions as required
• Control access to sensitive assets, programs and commands
• Improve user accountability and audit activities
• Track powerful user IDs and commands
• Prevent easy hacks by enforcing Password Quality
• Eliminate the need to disclose sensitive SUPERID passwords for executing commands
• Generate extensive reports on user activities
• Address PCI and other compliance requirements
• Get real-time notifications with Alert-Plus, and forward logs to SIEM for analysis

Key Features:

• Monitor and audit user sessions down to keystroke level
• Role-based user access
• Time restrictions by command and program
• User Authentication SEEP to prevent users from logging on outside CSP PassPort
• Powerful Custom Reporting
• Control client connections by IP address or IP address ranges
• Multi-factor authentication support (coming soon!)

Learn more about CSP PassPort here

CSP – The Superior Choice in NonStop Security

For complimentary access to CSP-Wiki®, an extensive repository of NonStop security knowledge and best practices, please visit wiki.cspsecurity.com

We Built the Wiki for NonStop Security ®

The CSP Team         

+1(905) 568 –8900