Hal, Try 1.1.5, 2.2.2 and 6.5.9 PCI DSS Requirement coupled with
http://en.wikipedia.org/wiki/File_Transfer_Protocol#Security Most of the PCI stuff is done generally to allow for as much as possible instead of documenting each specific protocol and remediation. Although if you have engaged a PCI Qualified Security Assessor .. they should be able to point to everything the PCI folks care about. -Rob Schramm Sirius Computer Solutions ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
