PCI Remediation: MPS Redbox

The MPS Redbox solution consists of two major components:

1. The Redbox appliance hardware, which is deployed in the stores, and
2. The Managed PCI System (MPS), which operates centrally to provide the support and management of the remote Redboxes.

Store Security Appliance

The Redbox is deployed remotely in the store, and changes the store configuration by allowing for network segmentation to take place, along with providing a number of specific security controls. The Redbox includes the necessary security controls to allow the store environment to meet all of the technical requirements of the PCI DSS.

Centralized Managed PCI System (MPS)

To help manage hundreds or thousands of remote Redboxes deployed across a merchant’s entire enterprise, the MPS includes a centralized PCI compliance infrastructure for Log Management and Redbox Configuration Management.

The MPS is designed to provide retail IT managers and compliance auditors with a centralized view into performance against compliance requirements across multiple stores. The MPS securely automates and manages many compliance-related tasks and data security events, automatically polling stores for security logs,and creating alerts where further investigation is required. Logs, file integrity, system status, access controls, local vulnerability scanning and Redbox configurations can be viewed, accessed and managed from corporate headquarters.

Configurations can be modified on an enterprise, group or individual basis. The Redbox Configuration Management framework allows Redboxes to be dynamically built from a single generic image, and the configuration of all of the network setup, virtual machines, security controls and store applications on a store-specific basis. For deployment or replacement, the Redbox only requires you to plug it in at the store, and then it configures itself. This intelligent configuration provides retailers an extremely simple deployment experience over traditional data security implementations.

The centralized MPS is also responsible for maintaining software versions and applying patches and updates.

• Simplify PCI Remediation: One vendor, one solution with a feature set designed to comprehensively satisfy the PCI requirements.
  
• Low Total Cost of Ownership: By eliminating the need for complex integration of multiple network products, Reliant Security reduces the cost of PCI Remediation substantially.
  
• PCI Investment with an ROI: The Redbox virtualized, open platform can be leveraged to host other in-store applications and create an ROI.
  
• Turnkey solution for PCI Compliance: Reliant Security can configure, deploy and provide the ongoing support of your PCI Network Security.

Reliant has various models of Redbox hardware options available, depending on the anticipated use of the Redbox in the store environment.

MPS Redbox Overview

• Single Core or Multi-Core ATOM Processor
  
• Up to 4GB Ram
  
• 2, 4, or 6GigE Ethernet Interfaces
  
• Up to 16GB of Compact Flash, or 2.5” 320GB Disk
  

MPS Centralized Servers Overview

MPS PCI Security Server:

• Two Processor Quad Core System
  
• 16 GB RAM
  
• 2 GB Ethernet Interfaces
  
• Minimum 500GB RAID 1 Storage
  

MPS Log Management Server:

• Eight Core System
  
• 16 GB RAM
  
• 2 GB Ethernet Interfaces
  
• Minimum 500 GB RAID 5 Mirror using 15K RPM SAS drives