We have a need to run PCI scans against a small office.
All the computers (five in total) in the office are behind a small NAT box.
The NAT device is hardened.
Scans come back failing because nothing is open:
Alert Logic Inc. has determined that the scanned system(s) are not compliant with the PCI Data Security Standard. The scan result shows that no target hosts were found.
How would/should we proceed with the scanning? We want the scan to say, "nothing open, nothing vulnerable!" and instead it says, "fail!"
Thanks in advance.
Please sign in to leave a comment.