You can pass PCI-DSS with proper firewall rules. For example, if you FS server only needs to accept calls from certain IP addresses, firewalling it out will pass the automated tests easily.

I know it's not ideal, but I've managed to make unpatched Windows 2003 servers pass the automated tests just by hiding them behind a proxy. 

I'm not condoning this practise, just timelines on that particular project required that they pass until we could upgrade them to Windows 2012. It bought us the time we needed

On 19 November 2015 at 08:21, Andrew Keil <andrew.keil@visytel.com> wrote:

Thanks for your feedback.

 

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Michael Jerris
Sent: Thursday, 19 November 2015 11:12 AM
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Subject: Re: [Freeswitch-users] FreeSWITCH version 1.4.x end of life - recommendation please

 

 

On Nov 18, 2015, at 6:49 PM, Andrew Keil <andrew.keil@visytel.com> wrote:

 

To FreeSWITCH users,

 

In order for my client to plan for FreeSWITCH version 1.4.x end of life, I have a few questions that I hope the FreeSWITCH team can help answer:

 

1)      Since the FreeSWITCH version 1.4.x branch is going end of life in early 2016, then obviously I need my client to migrate to the FreeSWITCH version 1.6.x branch ASAP.  Is there a definite date when the FreeSWITCH version 1.4.x branch is going end of life?

 

We don't have a specific date set, we will provide as many critical and security fixes as we can for it for a while.  That being said, we are already at the point where significant portions of fixes are not possible to back-port due to significant changes in the code between 1.4 and 1.6.  This continues to get worse over time.

 

2)      Regarding the FreeSWITCH version 1.6.x branch:

a.       Can this run on CentOS 6.x (ie. the latest release of CentOS 6)?

 

We have made minimal effort to try to package dependencies for it, and it was abandoned as it was determined to be too much work.  Its probably possible, but expect to:

 

1. Not have any support for video features.

2. Spend significant time working on packaging your own dependencies and testing.



 

                                                               i.      I understand that CentOS 7 is recommended, however upgrading the OS is a much bigger task than simply upgrading FreeSWITCH.  Especially since my client is also PCI compliant to enable credit card processing, which requires rigorous Operating System lockdown.  Currently my client will not be using the video features inside FreeSWITCH (ie. initially only using the feature set inside the FreeSWITCH version 1.4.x branch).

                                                             ii.      Is there anything I should be aware of when trying to get FreeSWITCH version 1.6.x branch working on CentOS 6?

 

We have done zero testing on it.  You will have to do all the dependency packaging back-porting for the deps you need and do testing and let us know.



 

I appreciate any feedback that you are able to provide to make this process as painless as possible.

 


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
Andrew Cassidy BSc (Hons) MBCS SSCA
Managing Director