Why You Need Retail Network Security

If VoIP runs on the same network as email and data, and the data network is vulnerable to Virus, spy-ware, and intruders planting worms, then retailers must find a way to inoculate voice systems too. Securing retail networks from a virus goes beyond the discomfort of email and computer downtime. A non secure compromised retail network may mean the loss of the ability to clear credit at the stores. Securing Point of Sales (POS) data in multi-channel retailers (Web, Catalog, and brick and mortar) who allow consumers to store a credit card data for future purchases are most susceptible to consumer credit theft through the use of intruders who secretly plant logging devices in the network for retrieval at a later date. DSW shoe recently reported the loss of customer data as a result of their inability to detect network intrusions. The Wall Street Journal recently reported that firms that publicly report their data has been stolen by network intruders lose share value of up to 12% in the year after going public.

Multi-channel retailers who clear and store consumer credit data (many web sites and catalog retailers offer this option) for future purchases are encouraged to become VISA CISP (Cardholder Information Security Program) compliant. The 12 point compliance categories force retailers to follow best practices to ensure that their systems are secure from intrusions. Most retail networks have firewalls installed, and many CIO’s think they’re done, but aren’t. Firewalls protect by setting policy. Policies set in firewalls tell who has entry and who is denied. Updating policy and recognizing the ever-changing landscape of intruders, telling the firewalls to update the policies is a full time endeavor most retail network administrators are not prepared for. Recognizing the unique characteristics of a hacker, or known viral strain would be impossible unless the retail network security expert had a global view of attacks.

Transactions that happen inside the store, that exit the store over a private frame or IP network may be encrypted in transit, but are still suspect to Trojan horse programs that hide in a retailers private networks. Once an intruder has access, he can create his own file directory with his own passwords and hide for months collecting data to be used at a later date. 3Com provides retailers Secure POS solutions that protect against intruders, hackers and Trojan horses, with it’s TippingPoint Intrusion Prevention System (IPS). TippingPoint's IPS is automatically updated with virtual software patches delivered via their Digital Vaccine service. This provides retailers preemptive protection from all known viruses reported by the TippingPoint Digital Vaccine research team.

In addition, 3Com has built security and intelligence into the network with a new Quarantine feature that will work with the new switch family and TippingPoint Intrusion Prevention Systems to enforce end point security. Quarantine, allows the suspect intruder to be moved off the WAN/LAN to a VLAN (Virtual LAN) that enables the network admin to hold the traffic to that device, and quarantine suspect traffic so that is does not corrupt precious mission critical or consumer credit data.

3Com Brochure: Intrusion Prevention Products »
3Com Brochure: Secure Converged Network Strategy »

 

Learn more about 3Com retail network solutions by using the online resources linked from this page or email us at retail@3com.com.

3Com Secure Converged Networks