Network Security / PCI Compliance

Threat Detection

RSS has a state-of-the-art system designed to detect a threat to the network in the form of Viruses, Spyware, hackers and other malicious activity. RSS security personnel investigate incidents detected by the system and proactively work with the customer to resolve the issue.

Network Monitoring / Internet Outage Remediation

One of the challenges to organizations is the lack of service levels on broadband networks. Most DSL and Cable providers do not monitor the customer endpoints or initiate a response to outages. RSS’s network monitoring system constantly determines whether the network connectivity at each location is operating properly. In the event of a failure, RSS personnel work quickly to determine the source of the outage and resolve the issue.

Equipment Repair/Replacement

RSS keeps hot spares of every supported firewall in the field. In addition, we backup the configuration of every device every night. In the event of a failure, a device is quickly configured and shipped overnight. When it arrives, it is ready to replace the defective device without any configuration.

Technical Support

RSS has a team of dedicated certified engineers available 24x7 that can solve any network or configuration problem. In most cases, any changes to the network or firewall settings can be accomplished in minutes. There is no limit to the amount of assistance that can be requested for a low, fixed monthly fee.

Deployment Services

For large installations that require on-site assistance with configuration, cabling and deployment of the networking equipment, RSS will provide a custom solution designed to meet the customer’s needs regardless of the location.

Wi-Fi Hotspot Services

For companies that wish to provide Wi-Fi to their guests, RSS has a variety of solutions designed to meet the needs of the customer.  Custom entry pages, acceptance of terms and conditions, wireless hour limitations, bandwidth throttling, etc. are available as part of our solutions.

VPN Client Software

Both IPSec and SSL-VPN connections can be implemented as a software solution on any PC needing to connect to a store or group of stores.  If a computer has access to the Internet, VPN client software can create an encrypted connection to the store network.  Users can be authenticated and different policies can be applied based on the needs of an individual.  With SSL-VPN, two factor authentication is achieved (required by PCI DSS version 2.0).

Once connected, users can see your network as though they were sitting in the office, allowing them access to all of the resources that they would be entitled to.

Content Management

Having an Internet use policy isn't very effective if you don't have a way to consistently enforce it. RSS combines two technologies to help you manage your Internet connection.  Content Filtering controls what sites employees can visit. Our firewall's Deep Packet Inspection (DPI) identifies traffic by it's unique characteristics and allows you to select what types of data can pass through the firewall. So for example, if you want to limit access to streaming media, instant messaging, Skype, Peer-to-Peer and other applications, you can select the options you want. You can even select which users can have access to which services and apply a schedule for the time of day it is available.

Deep Packet Inspection

Our Deep Packet Inspection engine examines all traffic passing through the firewall. It compares the data to a signature database of thousands of malicious and non-malicious profiles.  In addition to stopping viruses and other threats, it also identifies other types of traffic such as streaming media, instant messaging and other types of services. This provides it the ability to decide whether or not to let that data pass.

Content Filtering

RSS Content Filtering Service allows you to decide what categories of sites you want to block. With CFS, you can choose to block access to sites with pornography, violence, drugs, etc. In the end, you can increase productivity and reduce the legal and financial risks associated with inappropriate Web browsing.

Network Security Reports

RSS’s Web-based reporting system allows you to see how your Internet connection is being used. It's available 24x7 from anywhere you have Internet access without investing in expensive reporting packages.

A few of the reports available include:
•    Rogue Access Point Detection
•    Relevant PCI Compliance Reports
•    Top Web Surfers
•    Top Bandwidth Users
•    Top Websites visited
•    Utilization by Service (Email, Web, FTP, etc.)
•    Blocked Web Sites (from Content Filter Service)
•    Blocked Services (from Deep Packet Inspection)

Unified Threat Management

Our Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service examines all traffic passing through the firewall. It compares the data to a signature database of thousands of known threats. In the event there is a match, the traffic is stopped before it can do any harm. The database is automatically updated every few hours protecting you against frequently occurring zero-day threats. It can also be used to control non-business related internet use such as streaming media, Peer-to-Peer networks, Instant Messaging, etc. Traditional firewalls can't provide this protection because they do not examine the data as it passes.

Enterprise Anti-Virus

RSS offers an enterprise anti-virus solution with a real-time alerting system to RSS and a portal for the customer to view their endpoints and their status.  Combining anti-virus, an endpoint firewall, and advanced behavior-based protection, anti-virus is a necessity for all endpoints on your card-holder data network.  RSS puts the software in place to ensure your computers are always protected.

Internal Vulnerability Scans

Internal Vulnerability Scanning assists in securing your internal systems and complying with PCI requirement 11.2, by proactively identifying weaknesses within a company’s internal network environment.  Running as a small windows service on endpoints, the system is scheduled to run and delivers reports to a secured website for viewing and compliance.

Our Internal Vulnerability scan system will:

• Scan the in-scope network environment
• Detect and evaluate vulnerabilities to reduce false positives
• Deliver a vulnerability scan report that identifies vulnerabilities for each in-scope asset and include steps for remediation

External Vulnerability Scans (ASV – PCI Approved)

RSS offers quarterly external vulnerability scans approved by the PCI security standards council (PCI SSC).  RSS will assist you in scanning your public-facing IP addresses and provide PCI-approved reports.  (11.2.2 of the PCI DSS v2.0). (Store level location must have static IP address provided by ISP.)

For more information, please contact us toll-free: (877) 753-0154 or email us.