NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Greenlaw
May 21, 2018Tutor
How do you allowlist a block of external IP Addresses - Nighthawk R7800?
Whitelis needed - PCI External Vulnerability Scans via ControlScan
My credit card processor is requiring ControlScan to access my network to check for "Network security". My router is currently detecting their scan as a variety of attacks (SYN Flood, ACK Scan, Xmas Tress Scan etc) and blocks their IP and scans. I have been given a block of IP adresses that I need to "alowlist" on the router so that they can get access into the network but I cannot seem to figure out how to set this up. Any assistance is appreciated.
Model: R7800|Nighthawk X4S AC2600 WiFi Router - Firmware V1.0.2.46
- Thank you for the link and I apologize for my delay in replying to your kind and helpful suggestion. (It is refeshing compared to some other users that prefer to talkdown to people). I will update the firmware when I return to the physical location of the router, as i have been out of the state.
I actually was able to solve the issue by changing a single “speed setting” on their end of the software via their portal to “slow”. I know some other netgear users are having the same problem and would like to mention that the reason that they are not able to give as much techincal detail as some would like is because the third-party scanning company provides no information on what the scan entails and their phone support is completely clueless.
In an attempt to help other people with the issue and maybe give insight to Netgear Moderators here are the details for my particular case.
My business uses Heartland Payment Systems for our credit card merchant processing. At the begining of 2018, a company called ControlScan contacted me and said that to maintain PCI Compliance, i need to allow them to “scan my network” and tell them the WAN IP of my POS server (which processes the CC’s). My initial impression is that it was a scam. I contacted Heartland directely and, sure enough, the request from ControlScan is legit.
The only information they provide the client is that we need to allow a specific block of their IP addresses access to our network. That is all the info they give. In my case, the simple change of scan speed to “slow” somehow allowed the scan to take place and maintain PCI compliance.
Thank you again for your help.
5 Replies
If you're interested in futility rather than the kind of answer you
seek, then:
https://community.netgear.com/t5/x/x/m-p/1568591
Until someone exhumes some actual information on what these "scans"
actually do/need, I see little hope of getting anywhere.- JamesGLMaster
- JamesGLMaster
Hi Greenlaw,
We’d greatly appreciate hearing your feedback letting us know if you need further assistance.
- GreenlawTutorThank you for the link and I apologize for my delay in replying to your kind and helpful suggestion. (It is refeshing compared to some other users that prefer to talkdown to people). I will update the firmware when I return to the physical location of the router, as i have been out of the state.
I actually was able to solve the issue by changing a single “speed setting” on their end of the software via their portal to “slow”. I know some other netgear users are having the same problem and would like to mention that the reason that they are not able to give as much techincal detail as some would like is because the third-party scanning company provides no information on what the scan entails and their phone support is completely clueless.
In an attempt to help other people with the issue and maybe give insight to Netgear Moderators here are the details for my particular case.
My business uses Heartland Payment Systems for our credit card merchant processing. At the begining of 2018, a company called ControlScan contacted me and said that to maintain PCI Compliance, i need to allow them to “scan my network” and tell them the WAN IP of my POS server (which processes the CC’s). My initial impression is that it was a scam. I contacted Heartland directely and, sure enough, the request from ControlScan is legit.
The only information they provide the client is that we need to allow a specific block of their IP addresses access to our network. That is all the info they give. In my case, the simple change of scan speed to “slow” somehow allowed the scan to take place and maintain PCI compliance.
Thank you again for your help.