Store
 

Is VPN Tracker PCI DSS compliant? - KH1876

Frequently Asked Questions

Is VPN Tracker PCI DSS compliant?
 
Yes, you can set up a PCI DSS-compliant connection with VPN Tracker. The PCI DSS Logical Security Requirements (version 2.0) require that connections use the following:
  • Two-factor (2FA) or multi-factor authentication (MFA)
  • Certificate-based authentication
For IPsec VPN-connections, the additional requirements must also be met:
  • Main Mode exchange
  • 3DES or AES encryption
  • Perfect-Forward-Secrecy needs to be used
For SSL-based VPN-connections:
  • SSL and TLS 1.0 are probihibited
You will also need to ensure other logging and timeout requirements are met on the VPN gateway. Please see the full PCI documentation for details.