Aloha POS

[mbxray]

What files and/or directories should be monitored for security purposes ?

Mbxray

 

[AlohaRoss]

Can you be more specific when you mean security purposes.
Anything in the Aloha folder and all subfolders contain different information that should be kept secure. Not just credit card numbers, employee information, social security numbers, address and phone numbers if also entered

AlohaRoss

http://www.needaholahelp.com

3rd Party support

 

[mbxray]

I am a security analyst and one our new clients that we just brought on has aloha servers, and wanted to know which folders and or files to monitor under file note gritty monitoring. Should I monitor all the aloha folders ? Any others folders on a Aloha-both server ?

Mbxray

 

[MenulinkMan]

Thats hard to say. If you are watching for changes to a file, there are many a file that Aloha updates throughout the day, and that depends on what software options you have. My 200ish fileservers are kept behind a firewall that has PCI scans regularly, with only 2 people able to request changes. Manager users are non admin, and are restricted from what websites they can visit. Office doors kept locked. Its sometimes a pain, but LanDesk is always a good choice.

At my previous job, the biggest threat we had was pocket card readers being used by less than quality servers stealing your CC information.