Meeting a PCI requirement

Steven Williams · ‎02-05-2015

7.1.4

Are access controls implemented via an automated access control system?

How is everyone achieving this? Is this something ACS can do? I totally cannot fork over the money for ISE but trying to figure out what PCI DSS really wants with this?

Collin Clark · ‎02-12-2015

ACS and ISE can both do it, but so can Microsoft NPS and FreeRadius. What PCI wants is for authentication to be centralized and controlled with least privileges.

http://blog.skufel.net/2012/06/how-to-integrating-cisco-devices-access-with-microsoft-npsradius/

Steven Williams · ‎02-24-2015

Ok we are using NPS, but was thrown off by the word "automated".