Firewall Configuration for PCI DSS: Installation and Maintenance Checklist

List of Installation and Maintenance Checklist for Firewall Configuration so it could comply to PCI DSS
1. The PCI DSS requires a firewall that provides stateful inspection, also known as dynamic packet filtering.

2. Stateful inspection firewalls offer strong security along with good performance and transparency to end users, unlike the packet filtering and proxy firewalls.

3. Document your dataflow in order to aid the system and security administrators in configuring the firewall with the proper rule set.

4. Disable or remove all unneeded ports, protocols, and services not required for business purposes.

5. Deny all traffic into and out of the firewall that is not required for business purposes.

6. Your firewalls and routers must have documented configuration standards and the rule sets of each should be reviewed at least quarterly.

source: PCI Compliances, Tony Bradley 2007