FAQ: PCI Compliance for Cisco RV Series Routers

Available Languages

Download Options

  • PDF     (6.3 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (82.7 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (64.5 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:May 17, 2022
Document ID:1652796896731316

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

kmgmt-3085-pci-compliance-faq-rv-series-routers

Objective

This article will explain some frequently asked questions regarding PCI Compliance for the Cisco RV series routers.

Applicable Devices

Frequently Asked Questions on PCI Compliance

Are the RV Routers PCI Compliant?

The RV routers have not been certified as PCI Compliant and are not advertised as PCI Compliant.

Can I make my router PCI Compliant?

While the RV routers are not certified as PCI Compliant, many customers have been able to pass a Security Scan.

What can I do to make my router pass the Security Scan?

Each Security Scan is different. Steps can be taken in many cases to help address alerts in Security Scans. Disabling Remote Administration, VPN, and restricting any Port Forwarding can help. In addition, turn off unnecessary features like SNMP, UPnP, ping request, etc.

When running a Security Scan, why do I see alerts for TLS 1.0, TLS 1.1, SSLv3, 3DES?

Some Security Scans reported some of the older cryptographic protocols as they were supported, even if not being used. The latest firmware has removed support for TLS 1.0, TLS 1.1, and SSLv3. 3DES is currently still supported with IPsec.

Why do I see an alert for UDP 500?

IPsec uses UDP 500 for negotiating tunnels. If IPsec is enabled, scans will see UDP 500. With the latest firmware, you can turn off the “Global IPsec” option to disable UDP port 500.

Conclusion

These were some of the most common questions that have been asked about the Cisco RV series routers for PCI Compliance. Hope this helped answer your questions too!

Revision History

Revision Publish Date Comments
1.0
17-May-2022
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco