mailing list archives
RE: File Integrity Software - PCI
From: "Sheldon Malm" <smalm () ncircle com>
Date: Mon, 10 Nov 2008 13:21:47 -0800
Apologies in advance if this comes off as shameless self-promotion ...
I replied to Amy offline already, but feel free to check out File Integrity Monitoring in our (nCircle's) CCM product.
It's agentless, appliance-based, and a number of enterprise customers are using it ... with many using it specificially
for PCI Compliance efforts.
Security Research and Development
nCircle Network Security
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of H. Kurth Bemis
Sent: Monday, November 10, 2008 3:25 PM
To: Steve Freeman
Cc: amatachick () gmail com; security-basics () securityfocus com
Subject: RE: File Integrity Software - PCI
If you look at tripwire, look at "aide" as well.
On Mon, 2008-11-10 at 12:08 -0500, Steve Freeman wrote:
Try Tripwire. We used it to provide the audit requirement for our Windows
PCI environment. I believe there is a free version, we used the Enterprise
version. Passed compliance the first go round.
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of amatachick () gmail com
Sent: Monday, November 10, 2008 10:25 AM
To: security-basics () securityfocus com
Subject: File Integrity Software - PCI
I imagine some other people out there are going through PCI Compliance
issues as well right now. If that includes you, I could use your help. I'm
trying to find a good file integrity software choice that allows for all the
necessities needed for PCI compliance. I was trying to get our network team
to use Samhain but they rejected that saying it was too hard to setup. Does
anyone have any ideas on something easy to setup in a Windows environment?
It doesn't need to be a free product.
Thanks in Advance!!