ISP to Internet Edge HElp

Hello,

I was recently employed to this company.

I have been observing the setup.

i have noticed that the Internet cable from the ISP is connected to a Cisco switch, on a Vlan with no IP Address, and then from that Vlan to the Cisco Firewall.

My question is this, i know that method is effected, but to become PCI Compliant, wouldnt the ISP cable be required to be directed connected to the Firewall?

 

Not if you want to have a DMZ. I am assuming that the VLAN that the ISP modem is connected to has other equipment that the company wants unprotected by the firewall? Where is the LAN side of the firewall connected to?

 

The LAN side of the firewall is connected to a separate VLAN.

 

That makes sense. It appears that the one VLAN is a DMZ defining an area for unprotected equipment with direct access to and from the Internet. The VLAN on the LAN (protected) side of the firewall is for all the equipment you want to have protected by the firewall.

Sorry, I am not familiar with PCI compliance. Perhaps someone else can answer.