Demonstrate PCI DSS compliant network segmentation with Blackfoot’s PCI DSS Network Segmentation Testing service

Blackfoot’s network segmentation testing is delivered by our highly skilled testers who will test the effectiveness of your segmentation controls following an approved, structured methodology.

A network segmentation test includes:

• A thorough configuration review of devices involved in network segmentation. This includes examining rule sets, access control lists (ACLs), network address translation (NAT) settings and other device policies.
• Comprehensive rule analysis to determine the necessity of device rulesets, their correctness and potential security implications.
• Unnecessary or overly permissive rules may introduce vulnerabilities.
• Policy consistency checks to identify conflicts within device rulesets. Inconsistent rules can lead to unexpected behaviour or security gaps.
• An access control assessment evaluating the effectiveness of segmentation controls, ensuring that only authorised traffic is allowed and all unauthorised traffic is blocked between network segments.
• Evaluation of security best practices to ensure configurations align with industry best practices and comply with the PCI DSS.

A comprehensive report is generated detailing the findings of the assessment, including identified weaknesses and misconfigurations, and provides recommendations for remediation.

The assessment report provides guidance on how to address the identified issues and improve the effectiveness of the network segmentation.