Our Community Forums will be closing on June 27, 2024. Please visit att.com/support for all your support needs.
Need help with your equipment?
shebeast's profile

Contributor

 • 

3 Messages

Sunday, February 7th, 2016 6:22 AM

Security issue

I have a serious issue to deal with concerning the AT&T Uverse account at the office of Dr. *****. As his network admin, it is my job to find a solution; however, after hours and hours on the phone with level two tech from AT&T, techs from a company called Security Metrics, a CC processing company called TransNational and techs from the manufacturer of our newly purchased and installed second router at NetGear, no one has a definitive answer. It all boils down to one lousy open port on the AT&T router that they have open by default for their own use.

 

In order to be PCI compliant with our new CC pocessing machine which reads the newer CCs and even takes phone pay services, there can be no open ports on the router. AT&T refused to help. Said they could not close or filter the port, it was simply "too bad". 

 

I desparately want to talk to whoever the second level district manager is for the Burbank area. I'm at the office Tues, Wed. and Friday from 11 a.m to 6 p.m. the phone number is *****. If no one contacts me, we have the choice of pulling all our business, internet, cells phone, land lines, etc. out of AT&T and find an ISP who understands the importance of following government required regurlations. With a company as large as AT&T, it seems like someone would have dealt with this problem already. The company, Security Metrics, that does the scans, has told me they have hundreds of customers that have the same issues with AT&T Uverse.

 

Someone there needs to address this issue, NOW!! It will only get worse with the new Visa PCI DSS requirements.

 

[edited for privacy-please do not post personal or unique information such as but not limited to full names, employee ID numbers, email addresses, phone numbers, account numbers, etc.]

 

 

Community Support

 • 

6.7K Messages

8 years ago

Hi @shebeast,

 

We apologize about the issues, but we will do everything we can to help. With the Netgear router behind the U-verse gateway, if you close the port there, it should be good. The U-verse gateway may let the traffic through on that port, but the Netgear will stop it. 

 

Let us know if there is anything we can investigate or help out with further.

 

-ATTU-verseCare

Contributor

 • 

3 Messages

8 years ago

I've done that. The problem is that our IP for the AT&T and the netgear router (incoming that is) is the same. The first thing seen in the scan is the AT&T router. There is no IP passthrough setting on the AT&T router, only the DMZ setting.

 

Why is it so difficult for such a large ISP to understand that their own equipment is the problem and needs to be updated?

Community Support

 • 

6.7K Messages

8 years ago

Due to the way that our system authenticates, there is no firmware solution available that would allow for a true bridge mode. One other option would be to obtain static IPs, so that a public IP would be tied to your internal equipment and first scan would be on whatever device you choose, in this case your Netgear.

 

-ATTU-verseCare

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.