PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/14 of 250
1.4.2Network connections between trusted and untrusted networks are controlled
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
Inbound traffic from untrusted networks to trusted networks is restricted to:
- Communications with system components that are authorized to provide publicly accessible services, protocols, and ports.
- Stateful responses to communications initiated by system components in a trusted network.
- All other traffic is denied.
Defined Approach Testing Procedures:
1.4.2 Examine vendor documentation and configurations of NSCs to verify that inbound traffic from untrusted networks to trusted networks is restricted in accordance with all elements specified in this requirement.