The Payment Card Industry (PCI) is now mandating stricter wireless security measures and the cost of non-compliance is significant. PCI released an updated version of their Data Security Standard (DSS) that went into effect starting October 1st, 2008. PCI DSS  version 1.2 is the global standard adopted by the card brands for all organizations that process, store or transmit cardholder data. It consists of steps that mirror security best practices. PCI DSS places special emphasis on WLAN security. It requires Cardholder Data Environments (CDE) change wireless defaults (passwords, SSIDs, keys, etc.), use strong encryption, eliminate rogue/unauthorized wireless devices, restrict physical access to wireless devices, log wireless activity, define wireless usage policies, etc.

Motorola offers out-of-the-box PCI compliant WLAN infrastructure solutions. In addition, Motorola’s AirDefense Wireless IPS solution can lock down the retail airspace and provide the best wireless security available in the industry while facilitating cost-effective PCI compliance from a wireless perspective.

End-to-End PCI DSS Version 1.2 Wireless Compliance with Motorola

Motorola’s Enterprise Wireless LAN solutions designed to provide out-of-the-box PCI compliance, robust wireless security and cost-effective compliance validation.

Motorola’s complete portfolio of wireless LAN infrastructure is built on an integrated upgradeable platform, allowing organizations to cost-efficiently extend wireless networking from headquarters, to retail stores and distribution centers with ease of integration and manageability. The WS2000 Wireless Switch offers an easy to manage network-in-a-box solution for small enterprises and remote sites, including an integrated router, gateway, firewall, and Power-over-Ethernet (PoE). The RFS7000 provides robust, highly scalable support for enterprise mobility, offering enhanced roaming, security, quality of service and management features. Motorola’s RF Management Suite (RFMS) is a powerful set of integrated applications that enable administrators to execute end-to-end design and management of wireless LANs — pre- and post-deployment. All Motorola APs are designed for enterprise class wireless security supporting IEEE 802.11i (WPA and WPA2 certified) and 3DES IPSec encryption.

Motorola AirDefense Enterprise provides the most cost-effective mechanism to comply with PCI DSS wireless requirements. Complying with the PCI wireless requirements is tedious and expensive for most retailers. Motorola AirDefense Solutions recognize all WLAN devices, including APs, WLAN user stations, “soft APs” where stations function as APs and specialty devices such as wireless bar code scanners and mobile terminals for shipping or inventory applications. It also identifies rogue behavior from ad-hoc or peer-to-peer networking between user stations and accidental associations from user stations connecting to neighboring networks. Motorola AirDefense Enterprise can accurate distinguish neighboring devices from rogue devices connected to the retail network. In a mall with several stores, one is likely to see many neighboring wireless devices. It is crucial a WIPS be able to accurately classify neighboring devices from actual rogue devices connected to the store network.

Motorola AirDefense Enterprise can be setup to automatically terminate a rogue device over the air. Alternatively, the device can be blocked on the wired side using switch port suppression. To find the location of the rogue device, Motorola provides accurate map based location tracking using signal strength triangulation. The system intelligently sorts through multiple floor plans and enables the IT administrator to locate and track rogue devices in real-time.

PCI DSS 1.2 Wireless Requirements
Scope	Section	Requirement	Motorola
Universally Applicable Requirements	11.1	Identify rogue and unauthorized wireless devices
	12.9	Responding to unauthorized wireless
Scoping	1.2.3	Firewall wireless from card holder network
Requirements for In-Scope Wireless  Networks	2.1.1	Changing default wireless settings
	4.1.1	Encryption in wireless networks
	9.1.3	Physically secure wireless devices
	10.5.4	Audit logging of wireless activity
	11.4	Intrusion prevention (IPS) for wireless traffic
	12.3	Usage policies and procedures for wireless