Hi Andrew, we are also working on a PCIDSS certification (feasibility study), and use Freeswitch as a SBC for SIP trunks.. The solution from Semafone (https://www.semafone.com/) is quite largly used (at least in Europe) and I think that alternatives from other companies also exist elsewhere in the world. This type of product can greatly reduce the scope of the PCI perimeter, and make your Freeswitch out of it, if you use DTMFs to carry the credit card number. Their box removes DTMF info from the voice call, and can send it to your transaction server, thus reducing the scope of the PCIDSS perimeter. This mail is quite out of the scope of the Freeswitch list, and then will be my last one on this matter. Just my 2 cents ... Best regards, Dominique Jeannerod Interact-iv.com Mobile: +33 698 778 763 Headquarter : 600 rue Felix Trombe – tecnosud – 66100 Perpignan - France France : 0826 10 23 21 (0,15€/mn) International +33 (0)4 20 10 45 45 2015-11-20 9:27 GMT+01:00 Andrew Keil <andrew.keil@visytel.com>:
Michael,
Maybe I should clarify this a little further. The actual credit card processing is running on a separate server, however the FreeSWITCH server does collect the credit card number off the caller and offload this to the transaction server for processing. Therefore, the FreeSWITCH server (running on CentOS 6.7) is directly involved and needs to be PCI compliant. I hope this now makes more sense.
I noticed this thread has ballooned a little out-of-control.
Perhaps this thread should stop here.
I will attempt to build the latest production version (1.6.x) on CentOS 6.7 without video (by commenting those features out inside modules.conf) prior to the build taking place and provide an installation document here (in a similar way as I did for CentOS 7). I am sure I can get this up and running.
Regards,
Andrew Keil
---Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Michael Giagnocavo Sent: Friday, 20 November 2015 2:18 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] FreeSWITCH version 1.4.x end of life - recommendation please
That's poor planning; they need to split up networks and minimize PCI scope. Anyone that's finding PCI applying to their non-payment systems is doing it very wrong (and the costs will balloon). This is one huge reason why companies that offload handling of PAN like BrainTree and Stripe got so big - they make your PCI scope negligible.
-Michael
-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Andrew Keil Sent: Thursday, November 19, 2015 3:21 AM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] FreeSWITCH version 1.4.x end of life - recommendation please
No they do not, however it is at the same site and for PCI compliance all systems involved needed to be locked down.
-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of jungle Boogie Sent: Thursday, 19 November 2015 3:00 PM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] FreeSWITCH version 1.4.x end of life - recommendation please
On 18 November 2015 at 15:49, Andrew Keil <andrew.keil@visytel.com> wrote:
i. I understand that CentOS 7 is recommended, however upgrading the OS is a much bigger task than simply upgrading FreeSWITCH. Especially since my client is also PCI compliant to enable credit card processing, which requires rigorous Operating System lockdown. Currently my client will not be using the video features inside FreeSWITCH (ie. initially only using the feature set inside the FreeSWITCH version 1.4.x branch).
Does your clients actually run the credit card processing on the same server as freeswitch??
-- ------- inum: 883510009027723 sip: jungleboogie@sip2sip.info xmpp: jungle-boogie@jit.si
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org