Regularly Monitor And Test Networks; Requirement 10: Track And Monitor All Access To Network Resources And Cardholder Data - VeriFone Vx520 Implementation Manual

c. What this means to you
For your Point Vx you do not need to take any action.

2.5. Regularly Monitor and Test Networks

Requirement 10: Track and monitor all access to network resources and cardholder data

a. What the requirement says
"Logging mechanisms and the ability to track user activities are critical in preventing, detecting, or
minimizing the impact of a data compromise. The presence of logs in all environments allows thor-
ough tracking, alerting, and analysis when something does go wrong. Determining the cause of a
compromise is very difficult, if not impossible, without system activity logs.", reference 2.
b. How your Point Vx helps you meet this requirement
The Point Vx keeps a log for the 1000 latest transactions. This log contains truncated PANs. No card-
holder data is accessible from the Point Vx. The log file is deleted at software update
The Point Vx also keeps an Audit Trail to track changes to system level objects.
c. What this means to you
For the transaction log you do not need to take any action since no cardholder data is accessible.
For the Audit Trail there are no settings you need to do. The Audit Trail is created automatically and
cannot be disabled. The Audit Trail could be sent manually to a centralized server by entering the
Point Vx "LOG MENU", for further details please refer to the user's manual.
The address to the centralized log server is already set when you receive the terminal and normally
there is no need to change that address in the terminal. However, if for some reason this address
© 2015 VeriFone. All rights reserved. VeriFone, the VeriFone logo, Vx, Mx, VeriCentre, VeriShield, Verix V, Verix and PAYware are either
trademarks or registered trademarks of VeriFone in the United States and/or other countries. All other trademarks or brand names are the
properties of their respective holders. All features and specifications are subject to change without notice.
The information contained in this document is confidential and property of VeriFone, Inc. This material may not be copied or published, or
divulged in part or in totality without written permission form VeriFone, Inc.
Author
Jevgenijs Smirnovs
E-mail
jevgenijs.smirnovs@verifone.com
Phone
+371 67844726
Document name Verifone Payment Core
Point VxPC F02.01.xxx
Implementation Guide
Date
12-Jun-2015
Page number Version
19 1.0