Discovery of payment card devices for PCI

RemiJohnson · ‎06-01-2017

Has anyone set up discovery of payment card processing devices? Currently we are performing a monthly physical inventory but I would like to set up a discovery schedule to pick up these devices as a distinct CI - asset class. Thoughts on the best way to approach this task are welcome. Is a custom probe required?

Shiva Thomas · ‎06-02-2017

Hey, you're welcome... And I noticed your nice multi-language 'thank you', tailored for Switzerland!

Looking at the list of available probes, I would hope your devices all respond to SNMP protocol. (Simple Network Management Protocol - Wikipedia)

In this case you can use the generic 'SNMP - Identify' probe.

Your first task is to check how your devices respond to SNMP queries. There are lots of good tools for that, and you may have to ask your network engineer for assistance.

If that's the case, you will have to set SNMP support for Discovery and Create a Discovery CI classification.

Unfortunately, I will not be able to help you further, since I can't activate discovery on a dev instance. But this is a very interesting problem from my point of view, being a PCI DSS Security Officer and ServiceNow Implementation Specialist.

View solution in original post

maheshm · ‎04-03-2018

Hey RemiJohnson,

were you able to discover the POS Devices ?

we have a similar requirement for our organization.

if you are able to post your findings / solution that you have will be of a great help.

Cheers !

Mahesh.

adit · ‎07-30-2018

@Shiva, I have a similar requirement to discover store devices - POS, Registers, Scanners, etc. Wondering if you help to better understand and approach to achieve this

gwolfkill · ‎08-19-2020

Did you ever get this working?