GLI-19: - Gaming Laboratories International

GLI Standard #19 – Standards for Interactive Gaming Systems (Suppliers) Version 1.0
Final
facility that allows an alternate network path to be established that bypasses the firewall.
Examples of prohibited facilities are:
• An operator PC equipped with a phone modem; and
• An operator PC with a connection to the Gaming Platform VLAN and a
connection to the corporate VLAN.
d) The firewall must be a separate hardware device with the following characteristics:
i. Only firewall-related applications may reside on the firewall; and
ii. Only a limited number accounts may be present on the firewall (e.g. Gaming
Platform administrators only).
e) All data packets addressed to the firewall must be rejected if they arrive on interfaces to
networks which are outside the baseline envelope. This is to restrict access to the firewall
to authorized workstations inside the baseline envelope;
f) The firewall must reject all connections except those that have been specifically approved
by the jurisdiction;
g) The firewall must maintain an audit log of all changes to parameters that affect what
connections are permitted through the firewall;
h) The firewall must maintain an audit log of all successful and unsuccessful connection
attempts through itself;
i) The firewall must disable all communications if the audit log becomes full;
j) The firewall must reject all messages received on an interface if the message purports to
be on a device attached to another interface;
k) Operators must have approved procedures for following reports of security incidents and
for ensuring that firewalls are kept up to date with respect to advisory recommendations
released after such incidents; and
l) Networks on the secure side of the firewall should use RFC1918 private network
numbers. These numbers must be translated into public network numbers for
transmission over the Internet.
7.3.13 Web Application Security. The following requirements apply to the security of the
application used in the end player device:
Chapter Seven: Information Systems Security (ISS) Requirements Page 61
Copyright © 2011 Gaming Laboratories International, LLC
All Rights Reserved.