Protection from External Access. Teleflora Dove POS 5

The Dove POS 5 is a point-of-sale system designed specifically for florists. It is a comprehensive system that includes features such as order entry, inventory management, customer relationship management, and reporting. The system is easy to use and can be customized to meet the specific needs of your business.

PDF

Document

Teleflora Point of Sales PA-DSS Implementation Guide

Protection from External Access

Addresses:

PA-DSS 9.1.b

PA-DSS 10.1

PCI DSS 1.3

PCI DSS 1.3.4

PCI DSS 1.3.10

PCI DSS 1.3.9

PCI DSS 12.3.9

Protecting the Dove POS Server:

PA-DSS 9.1.b

The Dove POS “Server” computer contains cardholder data stored to disk. Because of such, it is critically important to never have this computer directly accessible from the internet. It is therefore, required that you employ a “firewall” device between the Dove POS server and the internet which restricts connections established from the internet, to your Dove POS server.

Protecting Dove POS Workstations

PA-DSS 10.1

The Dove POS Workstation software does not store cardholder information to disk. However, because these computers do receive payment information (both in the form of “keyed” transactions, as well as magnetic stripe data), it is important that these computers be protected from unauthorized administrative access. In particular, the use of a hardware firewall, and, in the case of multiple locations, use of a PCI compliant “VPN” to network these workstations to the server, is required.

Protecting other Computers on your Dove POS Network

PA-DSS 9.1.a

PA-DSS 9.1.b

It is important to understand that adding computers on the same network as your Dove POS server, may compromise your system’s security, and your PCI compliance. If you are considering adding any additional machines to your Dove POS network, you must ensure that the new computer(s) do not expose any network services to the public internet (for example, game related servers).

Firewall Configurations:

For more information on PCI compliant firewall settings, please see PCI section 1.3. The appendix of this document also details how to securely configure a wired network router.

How to Securely Configure a Wired Network Router

Protecting Mobile Computers (Laptops):

PA-DSS 10.1

Teleflora does not recommend nor support the use of mobile computing devices (most notably, laptops) connecting to your Dove POS network.

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 13

Key features

Order entry and processing
Inventory management
Customer relationship management
Reporting and analytics
Integration with Teleflora network
PCI DSS compliance
Secure data encryption
Remote administration capabilities

Frequently asked questions

PA-DSS stands for Payment Application Data Security Standards. It is a set of security standards developed by the Payment Card Industry Security Standards Council (PCI SSC) to protect cardholder data. Compliance with PA-DSS is a requirement for all merchants who accept credit card payments.

Use the Purge Cardholder Data tool located in the Tools > Support Tools menu. This tool will purge data older than your specified retention period.

Insert the Dove POS Install/Upgrade DVD into your computer's CD/DVD-ROM drive. The DovePOS Upgrade Wizard will automatically start and guide you through the update process.

User questions

Patricia I.

What are the data handling requirements for credit card information?

The document emphasizes PCI DSS compliance for merchants processing credit card payments, detailing the definition of 'Cardholder Information'. It provides guidelines on encrypting data, managing encryption keys, securely transmitting data over networks, purging data from the database, securing legacy systems and user authentication and password management for protecting cardholder data.

Patricia I.

What information is provided about payment processors and payment gateways?

While 'payment gateway' and 'processor' aren't explicitly detailed, the document discusses related concepts such as credit card processing, data encryption, secure data transmission. Elavon is mentioned as a network interface for transmitting credit card information, facilitating the secure transmission of credit card swipes, PANs, CVV, and debit PIN blocks, using SSL encryption.