PCI Technical Controls

Store Security Appliance

The Redbox appliance is deployed remotely in the store, and changes the store configuration by allowing for network segmentation to take place, along with providing a number of specific security controls. The Redbox includes the necessary security controls to allow the store environment to comprehensively meet the technical requirements of the PCI DSS.

Centralized Security Management

To help manage hundreds or thousands of remote Redboxes deployed across a merchant’s entire enterprise, Redbox Platform includes a centralized PCI compliance infrastructure for Log Management and Redbox Configuration Management.

The Redbox Platform is designed to provide retail IT managers and compliance auditors with a centralized view into performance against compliance requirements across multiple stores. Redbox Platform securely automates and manages many compliance-related tasks and data security events, automatically polling stores for security logs and creating alerts where further investigation is required. Logs, file integrity, system status, access controls, local vulnerability scanning and Redbox configurations can be viewed, accessed and managed from corporate headquarters.

Configurations can be modified on an enterprise, group or individual basis. The Redbox Configuration Management framework allows Redboxes to be dynamically built from a single generic image, and the configuration of all of the network setup, virtual machines, security controls and store applications on a store-specific basis. For deployment or replacement, the Redbox only requires you to plug it in at the store, and then it configures itself. This intelligent configuration provides retailers an extremely simple deployment experience over traditional data security implementations. The centralized MPS is also responsible for maintaining software versions and applying patches and updates.