Share via

Is an ASE required for PCI SAQ A-EP compliance?

Mr J Smith 6 Reputation points
2020-01-28T14:49:41.737+00:00

Is an ASE required for PCI SAQ A-EP compliance? or as long as the web application is correctly secured, simply using 'standard' Web Apps will provide the necessary network security required for compliance.

Our design would have Application Gateway in front of the Web Apps and the web application would use Azure SQL.

Thanks for your help

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,296 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daniel Powell 1 Reputation point
    2020-02-04T23:30:58.453+00:00

    You would need an application gateway or other WAF component (e.g. an NVA with WAF features). You could also use containers/AKS

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.