<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Liquid Web Knowledge Base</title>
	<atom:link href="http://kb.liquidweb.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://kb.liquidweb.com</link>
	<description>With Heroic Support Comes a Heroic Knowledge Base</description>
	<lastBuildDate>Fri, 17 May 2013 19:48:44 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>Reading Bandwidth Graphs In Manage</title>
		<link>http://kb.liquidweb.com/reading-bandwidth-graphs-in-manage/</link>
		<comments>http://kb.liquidweb.com/reading-bandwidth-graphs-in-manage/#comments</comments>
		<pubDate>Fri, 17 May 2013 19:48:44 +0000</pubDate>
		<dc:creator>phawkins</dc:creator>
				<category><![CDATA[Billing + Manage]]></category>
		<category><![CDATA[bandwidth]]></category>
		<category><![CDATA[manage]]></category>
		<category><![CDATA[monitoring]]></category>
		<category><![CDATA[network]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4739</guid>
		<description><![CDATA[Have you ever wanted to check up on the details of your server&#8217;s bandwidth usage? Liquid Web&#8217;s manage interface provides graphs that give you such information. Here&#8217;s how to read them. To see the bandwidth graphs for a server in manage, simply click the plus sign by the specific server. The server dashboard will expand, [...]]]></description>
				<content:encoded><![CDATA[<p>Have you ever wanted to check up on the details of your server&#8217;s bandwidth usage? Liquid Web&#8217;s <a href="https://manage.liquidweb.com/" title="Manage Interface">manage interface</a> provides graphs that give you such information. Here&#8217;s how to read them.</p>
<p><span id="more-4739"></span></p>
<p>To see the bandwidth graphs for a server in manage, simply click the plus sign by the specific server. The server dashboard will expand, and the bandwidth graph will be in the upper right-hand corner.</p>
<p>The vertical axis of the graph shows bandwidth used in megabytes. The horizontal axis shows progression over time in weeks. The blue on the graph shows bandwidth coming in to the server, and the green shows the bandwidth being sent out by the server.</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/05/bandwidth-basic.png"><img src="http://kb.liquidweb.com/wp-content/uploads/2013/05/bandwidth-basic.png" alt="bandwidth-basic" width="319" height="229" class="aligncenter size-full wp-image-4741" /></a></p>
<p>If you have not moused over the graph, you might not have noticed that if you click on it, it expands to show more detail over a longer period of time.</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/05/bandwidth-expanded.png"><img src="http://kb.liquidweb.com/wp-content/uploads/2013/05/bandwidth-expanded.png" alt="bandwidth-expanded" width="571" height="245" class="aligncenter size-full wp-image-4740" /></a></p>
<h2>Interpreting the Data</h2>
<p>Bandwidth graphs can be used to give you a general idea of traffic patterns and the amount of data you are distributing, as well as alert you to any sudden spikes or troughs in usage. In fact, our <a href="http://www.liquidweb.com/blog/index.php/our-dedicated-monitoring-team-provides-proactive-server-management/" title="Sonar Monitoring™ Team">Sonar Monitoring™ Team</a> watches this data as part of their work keeping your services up and available. If you see something unexpected in the bandwidth graphs and do not know what caused it, feel free to contact Liquid Web&#8217;s Heroic Support™. The team can help sift through server logs and other indicators to see just what is going on with your server.</p>
<p>===</p>
<p><strong>Liquid Web&#8217;s Heroic Support is always available to assist customers with this or any other issue. If you need our assistance please contact us:<br />
Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:support@liquidweb.com">support@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/reading-bandwidth-graphs-in-manage/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to Install Hadoop with Cloudera</title>
		<link>http://kb.liquidweb.com/how-to-install-hadoop-with-cloudera/</link>
		<comments>http://kb.liquidweb.com/how-to-install-hadoop-with-cloudera/#comments</comments>
		<pubDate>Thu, 16 May 2013 20:14:18 +0000</pubDate>
		<dc:creator>csauter</dc:creator>
				<category><![CDATA[Featured Articles]]></category>
		<category><![CDATA[account management]]></category>
		<category><![CDATA[big data]]></category>
		<category><![CDATA[data management]]></category>
		<category><![CDATA[hadoop]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4717</guid>
		<description><![CDATA[We recently illustrated how some of our customers were using Liquid Web&#8217;s extensive resources to leverage big data with Hadoop. While many users could benefit from the data management capabilities Hadoop delivers, finding the right software to launch it and installing Hadoop stacks may give some pause. Using Cloudera, this can be accomplished in just [...]]]></description>
				<content:encoded><![CDATA[<p>We recently illustrated <a href="http://www.liquidweb.com/blog/index.php/enterprises-now-using-liquid-web-infrastructure-to-leverage-big-data-with-hadoop/" target="_blank">how some of our customers were using Liquid Web&#8217;s extensive resources to leverage big data with Hadoop</a>. While many users could benefit from the data management capabilities Hadoop delivers, finding the right software to launch it and installing Hadoop stacks may give some pause. Using Cloudera, this can be accomplished in just a few simple steps we&#8217;ll outline below. [note: There are a number of software options available to run Hadoop, however we have chosen to highlight Cloudera as it offers a great deal of simplicity, ease, and automation for those new to running Hadoop.]</p>
<p><strong>Step 1:<br />
</strong>Install <a href="http://www.cloudera.com/content/cloudera/en/products/cloudera-manager.html" target="_blank">Cloudera Manager.</a> Liquid Web cannot install Cloudera on your servers for you due to Cloudera&#8217;s Terms of Service. However, this simple installation gives you access to automatic installation of Hadoop stacks, other related software stacks, and nodes (also known as Hadoop clusters) for free.</p>
<p><strong>Step 2:<br />
</strong>Choose from Cloudera&#8217;s free edition or its fully supported enterprise version if you plan on running a cluster larger than 50 nodes or if you would like additional support from Cloudera. All of the projects you launch will remain open source and can be built from source. As the free edition offers more than enough functionality and ease of use for the average user, we will proceed from here as if you have chosen this option.</p>
<p><strong>Step 3:<br />
</strong>You will now need to specify the hosts for your installation:<br />
<a href="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-04.png"><img class="alignnone  wp-image-4719" alt="hadoop-cloudera-04" src="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-04.png" width="570" height="204" /></a></p>
<p><strong>Step 4:<br />
</strong>Select &#8216;Use Parcels&#8217;, other options for parcels, and &#8216;Matched release for this Cloudera Manager server&#8217;<br />
<a href="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-05.png"><img class="alignnone  wp-image-4725" alt="hadoop-cloudera-05" src="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-05.png" width="572" height="458" /><br />
<strong></strong><br />
</a><br />
<strong>Step 5:<br />
</strong>Provide SSH login credentials by selecting root and allowing all hosts to accept the same password (this can be changed in the future as needed). Once this is confirmed, Cloudera will begin installing your host(s) as well as your clusters. This may take a moment depending on the amount of data you&#8217;re importing. Once it has completed, check the list of hosts it generates and make sure everything has completed with no errors. You may run this installation again or go back and check for mistakes if it did not complete properly.<br />
<a href="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-11.png"><img class="alignnone  wp-image-4727" alt="hadoop-cloudera-11" src="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-11.png" width="572" height="629" /></a></p>
<p><strong>Step 6:</strong>Cloudera Manager will now allow you to select which services to install. Based on your needs, you can choose anything from &#8220;Core Hadoop&#8221; services (if you are concerned with space) to &#8220;All Services&#8221; (to ensure the functionality of any future endeavor) to your own custom options.<br />
<a href="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-12.png"><img class="alignnone  wp-image-4729" alt="hadoop-cloudera-12" src="http://kb.liquidweb.com/wp-content/uploads/2013/05/hadoop-cloudera-12.png" width="572" height="218" /></a></p>
<p>Once you choose the services you want to install on your cluster, the automatic installation of your Hadoop stack will complete. From here you will be taken to your main Cloudera Manager menu where you can begin using Hadoop.</p>
<p>===</p>
<p><strong>Liquid Web&#8217;s Heroic Support is always available to assist customers with this or any other issue. If you need our assistance please contact us:<br />
Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:support@liquidweb.com">support@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/how-to-install-hadoop-with-cloudera/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>What SSL Do I Need?</title>
		<link>http://kb.liquidweb.com/what-ssl-do-i-need/</link>
		<comments>http://kb.liquidweb.com/what-ssl-do-i-need/#comments</comments>
		<pubDate>Fri, 10 May 2013 21:21:30 +0000</pubDate>
		<dc:creator>phawkins</dc:creator>
				<category><![CDATA[Featured Articles]]></category>
		<category><![CDATA[account management]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[ssl]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4705</guid>
		<description><![CDATA[So you have come to the realization that you need an SSL Certificate. But there are several different types. Which one do you really need? Basic Usage If you only have one site or one subdomain of a site that you wish to secure with an SSL certificate, a Standard SSL is your best fit. [...]]]></description>
				<content:encoded><![CDATA[<p>So you have come to the realization that you need an SSL Certificate. But there are several different types. Which one do you <em>really</em> need?</p>
<p><span id="more-4705"></span></p>
<h2>Basic Usage</h2>
<p>If you only have one site or one subdomain of a site that you wish to secure with an SSL certificate, a Standard SSL is your best fit. For example, say you decide to add a store to your site at shop.example.com, but you do not have any other secure login areas on your site. A Standard SSL for shop.example.com will secure just that area.</p>
<p><a title="SSL Certificates Available from Liquid Web" href="http://www.liquidweb.com/services/ssl-certs.html" target="_blank">SSL Certificates Available from Liquid Web</a></p>
<h2>Multiple Subdomains</h2>
<p>But what if your site has multiple subdomains that need to be secured? shop.example.com, forums.example.com, apply.example.com… a single Standard SSL will not cover all these subdomains. For these, you will need at least a Wildcard SSL. Wildcard SSLs cover every subdomain that you can possibly come up with.</p>
<h2>Levels of Validation</h2>
<p>Standard SSL and Wildcard SSL certificates not only secure your site, but also demonstrate that you have the right to use a domain name, as far as the certificate authority that issues the certificate can tell. (Liquid Web sells certificates that have been validated by Globalsign®, a highly-respected certificate authority.)</p>
<p>But say that you also want to demonstrate that your company has been vetted beyond just your right to use the domain name. An Organization SSL shows that your organization has been reviewed by the certificate authority. The verified details are visible in a browser when a user clicks on the Secure Site Seal, should you choose to add it to your site.</p>
<p>If you want a more thorough validation that is more visible in the browser, an Extended Validation or EV SSL certificate is just the thing. In addition to the benefits of an Organization SSL, an EV certificate both turns the address bar of your browser green and displays the organization&#8217;s name on the right side of the address bar. This is the only way to get your company name so prominently displayed in the address bar.</p>
<h2>Multiple Domain Names</h2>
<p>Finally, your organization may need to administer multiple domains with one SSL certificate. Perhaps you have the .com, .org, .net, and .biz domains for your organization, and use different ones in different contexts. A Unified Communication SSL can be added on to your Standard, Wildcard, or Organization SSL and let you manage multiple domains with one SSL certificate.</p>
<p>If you have any questions about which SSL certificate is right for you and your organization, do not hesitate to talk to Liquid Web&#8217;s Heroic Sales Team using the contact information below.</p>
<p>===</p>
<p><strong>Liquid Web&#8217;s Heroic Support is always available to assist customers with this or any other issue. If you need our assistance please contact us:<br />
Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:support@liquidweb.com">support@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/what-ssl-do-i-need/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Administering LiteSpeed Web Server in cPanel</title>
		<link>http://kb.liquidweb.com/administering-litespeed-web-server-in-cpanel/</link>
		<comments>http://kb.liquidweb.com/administering-litespeed-web-server-in-cpanel/#comments</comments>
		<pubDate>Thu, 02 May 2013 22:46:28 +0000</pubDate>
		<dc:creator>phawkins</dc:creator>
				<category><![CDATA[Technical Support]]></category>
		<category><![CDATA[command line]]></category>
		<category><![CDATA[cpanel]]></category>
		<category><![CDATA[httpd_conf]]></category>
		<category><![CDATA[litespeed]]></category>
		<category><![CDATA[whm]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4693</guid>
		<description><![CDATA[If you are used to administering Apache on a cPanel server, administering the faster Litespeed webserver is not that much different. Litespeed transparently takes over for Apache; any configuration changes that you would normally make in an Apache configuration file or .htaccess files is still made in those files. In fact, once Litespeed is installed [...]]]></description>
				<content:encoded><![CDATA[<p>If you are used to administering Apache on a cPanel server, administering the faster Litespeed webserver is not that much different. Litespeed transparently takes over for Apache; any configuration changes that you would normally make in an Apache configuration file or .htaccess files is still made in those files. In fact, once Litespeed is installed you can administer your cPanel server like you normally would. The few changes you would want to make to Litespeed directly can be done through your server&#8217;s Web Host Manager (WHM).</p>
<p><span id="more-4693"></span></p>
<p>Once you are logged into WHM, either click through <strong>Plugins</strong> and <strong>LiteSpeed Web Server</strong>, or just search for &#8220;LiteSpeed&#8221;. The main page gives you the following headings:</p>
<ul class="listingAlt">
<li><span style=line-height: 13px;">Install LiteSpeed WebServer</span></li>
<li>Control LiteSpeed WebServer</li>
<li>License Management</li>
<li>Switch between Apache and Litespeed</li>
</ul>
<p>As part of Liquid Web&#8217;s management of LiteSpeed, you will probably not need to manage the license or change the installation.</p>
<h2>Controlling LiteSpeed</h2>
<p>Once you are in Litespeed&#8217;s configuration page, click on <strong>Admin Web Console</strong>. The console has three main areas: <em>General</em>, <em>Configuration</em>, and <em>Web Console</em>.</p>
<p>The general area lets you do the following:</p>
<ul class="listingAlt">
<li><span style=line-height: 13px;">Gracefully restart Litespeed (this needs to be done after any configuration changes are made).</li>
<li>View Litespeed logs and statistics.</li>
<li>Enable and disable specific virtual hosts.</li>
</ul>
<p>The configuration area gives you much more control over Litespeed&#8217;s configuration. While Liquid Web&#8217;s configurations are already optimized for speed, should you need to tweak specific aspects of your configuration this is the place. If you have a specific question about a configuration variable, each one has a handy information pop-up that displays while you hover over the blue &#8220;i&#8221; speech bubble.</p>
<h2>Switching Between Apache and LiteSpeed</h2>
<p>If for some reason you wish to run plain Apache for a time, the plugin page in WHM has <strong>Switch to Apache</strong> and <strong>Switch to LiteSpeed</strong> links right at the bottom. Each will take you to a confirmation page. If you mistakenly click &#8220;Switch to LiteSpeed&#8221; when you are already running Litespeed, the confirmation page will let you know.</p>
<h2>Command Line LiteSpeed</h2>
<p>While most everything Litespeed can be configured from WHM, changing the Litespeed administrator&#8217;s password must be done from the command line like so:</p>
<p> <code>root@host# /usr/local/lsws/admin/misc/admpass.sh</code></p>
<p>The beginning of that command (/usr/local/lsws) may occasionally be in a different directory, depending on where Litespeed was originally installed.</p>
<p>===</p>
<p><strong>Liquid Web&#8217;s Heroic Support is always available to assist customers with this or any other issue. If you need our assistance please contact us:<br />
Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:support@liquidweb.com">support@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/administering-litespeed-web-server-in-cpanel/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WordPress ModSecurity Rules</title>
		<link>http://kb.liquidweb.com/wordpress-modsecurity-rules/</link>
		<comments>http://kb.liquidweb.com/wordpress-modsecurity-rules/#comments</comments>
		<pubDate>Wed, 10 Apr 2013 20:45:10 +0000</pubDate>
		<dc:creator>bkaldor</dc:creator>
				<category><![CDATA[Technical Support]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4641</guid>
		<description><![CDATA[WordPress is a popular publishing platform which is known for its robust features, numerous templates, and large support community. Unfortunately, due to such popularity, WordPress is also constantly subject to attempts at exploiting vulnerabilities. Ensuring WordPress and any associated plugins are installed with the most current versions is an important means of securing your site. [...]]]></description>
				<content:encoded><![CDATA[<p style="margin-top:10px;">WordPress is a popular publishing platform which is known for its robust features, numerous templates, and large support community. Unfortunately, due to such popularity, WordPress is also constantly subject to attempts at exploiting vulnerabilities. Ensuring WordPress and any associated plugins are installed with the most current versions is an important means of securing your site. However, ModSecurity provides a significant amount of further security by providing an application firewall.</p>
<p>ModSecurity (also known as &ldquo;modsec&rdquo;) has proven itself useful in a variety of situations, and again this is true in assisting with WordPress brute force attempts resulting in a Denial of Service (DoS) attack. While a number of WordPress plugins exist to prevent such attacks, custom modsec rules can prevent such attacks for all WordPress installations on a server. Modsec immediately filters incoming HTTP requests, which assists against taxing server resources.</p>
<p>These rules will block access for the offending IP address for 5 minutes upon 10 failed login attempts over a 3 minute duration. These rules have been automatically updated in the custom rules for Liquid Web&rsquo;s ServerSecure service. For customers without ServerSecure, these rules can be added to their custom modsec rules. To accomplish this, edit your custom modsec user rules and append the file with the rules provided below. For CPanel servers, this file is likely located at <span style="font-style:oblique;">/usr/local/apache/conf/</span></p>
<div style="color:#000; font-family: courier; width:620px; padding:10px 10px 10px 10px; margin-bottom:15px; border:1px solid black; font-size:10px;">
SecAction phase:1,nolog,pass,initcol:ip=%{REMOTE_ADDR},initcol:user=%{REMOTE_ADDR},id:5000134<br />
&lt;Locationmatch &quot;/wp-login.php&quot;&gt;<br />
# Setup brute force detection.<br />
# React if block flag has been set.<br />
SecRule user:bf_block &quot;@gt 0&quot; &quot;deny,status:401,log,id:5000135,msg:&#39;ip address blocked for 5 minutes, more than 10 login attempts in 3 minutes.&#39;&quot;<br />
# Setup Tracking.  On a successful login, a 302 redirect is performed, a 200 indicates login failed.<br />
SecRule RESPONSE_STATUS &quot;^302&quot; &quot;phase:5,t:none,nolog,pass,setvar:ip.bf_counter=0,id:5000136&quot;<br />
SecRule RESPONSE_STATUS &quot;^200&quot; &quot;phase:5,chain,t:none,nolog,pass,setvar:ip.bf_counter=+1,deprecatevar:ip.bf_counter=1/180,id:5000137&quot;<br />
SecRule ip:bf_counter &quot;@gt 10&quot; &quot;t:none,setvar:user.bf_block=1,expirevar:user.bf_block=300,setvar:ip.bf_counter=0&quot;<br />
&lt;/locationmatch&gt;
</div>
<p style="font-style:oblique;">Courtesy of <a href="http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/" title="Frameloss.org" target="_blank">Frameloss.org</a></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/wordpress-modsecurity-rules/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Automating DNS With Zone Delegation and the Storm API</title>
		<link>http://kb.liquidweb.com/automating-dns-with-zone-delegation-and-the-storm-api/</link>
		<comments>http://kb.liquidweb.com/automating-dns-with-zone-delegation-and-the-storm-api/#comments</comments>
		<pubDate>Fri, 29 Mar 2013 18:28:51 +0000</pubDate>
		<dc:creator>jgillman</dc:creator>
				<category><![CDATA[Technical Support]]></category>
		<category><![CDATA[dig]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[name servers]]></category>
		<category><![CDATA[storm]]></category>
		<category><![CDATA[zones]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4523</guid>
		<description><![CDATA[Although the term DNS zone delegation may seem new to you, you have been using zone delegation without even realizing it. When you tell your domain&#8217;s registrar what nameservers you are using for a particular domain, you are delegating the zone for that domain. Single zone delegation will work for most people. In fact, most [...]]]></description>
				<content:encoded><![CDATA[<p>Although the term <a href="http://www.liquidweb.com/kb/new-user-tutorial-what-is-dns/" title="New User Tutorial: What is DNS?" target="_blank">DNS</a> zone delegation may seem new to you, you have been using zone delegation without even realizing it. When you tell your domain&#8217;s registrar what nameservers you are using for a particular domain, you are delegating the zone for that domain.</p>
<p>Single zone delegation will work for most people. In fact, most use a single zone file to reference multiple hosts, or multiple subdomains residing on a single host. However, there are cases where where it may be beneficial to perform additional delegation.</p>
<p><span id="more-4523"></span></p>
<p>For example, say that you run your own nameservers via <a href="http://www.liquidweb.com/kb/how-to-set-up-nameservers-in-cpanel/" title="How To: Set Up Nameservers in cPanel" target="_blank">cPanel</a> for the exampleco.com domain. However, you are planning on spinning up a significant amount of <a href="http://www.liquidweb.com/StormServers/" title="Storm Servers">Storm Servers</a>, and you want these servers to utilize test.exampleco.com as the domain portion of the Fully Qualified Domain Name (FQDN). You may not want to clutter up the example.com zone file with all the entries for the test.example.com hosts. You also may want to utilize Storm API calls to create the records.</p>
<p>As such, you will need to delegate the test.exampleco.com zone to Liquid Web&#8217;s nameservers.</p>
<h3>How To Delegate Zones</h3>
<p>The first thing we will need to do is create a test.example.com zone on Liquid Web&#8217;s nameservers.</p>
<p>To do this, log into your management interface, click networking, and click the DNS tab. Once there, enter test.exampleco.com into the create field and click create (you will not enter an IP address):</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/Create-zone.png"><img src="http://kb.liquidweb.com/wp-content/uploads/2013/03/Create-zone.png" alt="Create a Zone in the Manage Interface" width="620" height="300" class="alignnone size-full wp-image-4622" /></a></p>
<p>Once that is done, you will need to go to cPanel and edit the exampleco.com zone to let it know that Liquid Web is handling the resolution requests for the test.exampleco.com zone. Remember that NS record type that I mentioned earlier? This is where you will use it:</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/Edit-cPanel-Zone.png"><img src="http://kb.liquidweb.com/wp-content/uploads/2013/03/Edit-cPanel-Zone.png" alt="Edit cPanel Zone" width="661" height="65" class="alignnone size-full wp-image-4613" /></a></p>
<p>Once that is done, to verify things are working properly, run the following in a console:</p>
<p><code>dig NS test.exampleco.com</code></p>
<p>Under the answer section, it should show ns and ns1.sourcedns.com</p>
<p>Once this happens, Liquid Web&#8217;s nameservers will be resolving A records for hosts utilizing the test.exampleco.com domain. Now you could write a script to make the appropriate API calls to not only <a href="http://www.liquidweb.com/StormServers/api/docs/v1/Storm/Server.html#method_create" title="Storm Server Create Method Documentation" target="_blank">create servers</a> en mass, but <a href="http://www.liquidweb.com/StormServers/api/docs/v1/Network/DNS/Record.html#method_create" title="Zone Record Creation Method Documentation" target="_blank">add the appropriate zone records</a> as well.</p>
<p>===</p>
<p><strong>Liquid Web&#8217;s Heroic Support is always available to assist customers with this or any other issue. If you need our assistance please contact us:<br />
Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:support@liquidweb.com">support@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/automating-dns-with-zone-delegation-and-the-storm-api/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How To: Create a Storm Load Balancer</title>
		<link>http://kb.liquidweb.com/how-to-create-a-storm-load-balancer/</link>
		<comments>http://kb.liquidweb.com/how-to-create-a-storm-load-balancer/#comments</comments>
		<pubDate>Fri, 22 Mar 2013 21:02:22 +0000</pubDate>
		<dc:creator>phawkins</dc:creator>
				<category><![CDATA[Billing + Manage]]></category>
		<category><![CDATA[load balancing]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4594</guid>
		<description><![CDATA[In the past, load balanced setups have required dedicated networking equipment, which takes time and expertise to set up correctly. Liquid Web&#8217;s Storm Load Balancer makes setup and configuration of a load balancer as easy as filling out a web form. First, log into your manage interface and click on the &#8220;Create&#8221; button, in the [...]]]></description>
				<content:encoded><![CDATA[<p>In the past, load balanced setups have required dedicated networking equipment, which takes time and expertise to set up correctly. Liquid Web&#8217;s Storm Load Balancer makes setup and configuration of a load balancer as easy as filling out a web form.<br />
<span id="more-4594"></span></p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/hosting-services-load-balancer.png"><img src="http://kb.liquidweb.com/wp-content/uploads/2013/03/hosting-services-load-balancer.png" alt="hosting-services-load-balancer" width="640" height="264" class="aligncenter size-full wp-image-4597" /></a></p>
<p>First, log into your <a href="https://manage.liquidweb.com">manage interface</a> and click on the &#8220;Create&#8221; button, in the upper left-hand corner. Under &#8220;Hosting Services&#8221;, select &#8220;Storm Load Balancer&#8221; [1], then click &#8220;Configure New Device&#8221; [2].</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/load-balancer-creation-1.png"><img src="http://kb.liquidweb.com/wp-content/uploads/2013/03/load-balancer-creation-1.png" alt="load-balancer-creation-1" width="639" height="332" class="aligncenter size-full wp-image-4596" /></a></p>
<p>Next, configure and create the load balancer. Make sure that you select the same region that holds the servers you wish to load balance[1]. After entering a name for your load balancer[2], choose the service you plan on balancing[3]. For most cases this will be web traffic, but you have the option of selecting other ports.</p>
<p>Once the service is selected, you will need to indicate which nodes you want to balance[4]. You should be balancing traffic between a minimum of two nodes.</p>
<p>Next, select the load balancing method that works best for your traffic[5]. There are three options: Round Robin, Least Connect, and Historical Intelligence. Each has tradeoffs:</p>
<ul class="listingAlt">
<li><span style="line-height: 13px;"><strong>Round Robin</strong> simply goes down the list of nodes, sending each request to the next node on the list. While it is a straightforward method, it does not take into account how busy each node is.</span></li>
<li><strong>Least Connect</strong> sends each request to the node that has the fewest connections. This helps keep requests from piling up on a node.</li>
<li><strong>Historical Intelligence</strong> has some of the benefits of Least Connect, while also taking into account how busy nodes have been in the past. Busier nodes are avoided when possible.</li>
</ul>
<p>Enabling session persistence will enable your applications to persist a visitor&#8217;s session using cookies. An SSL certificate an also be applied to the load balancer.</p>
<p>After everything is set up to your liking, click &#8220;Create Load Balancer&#8221;. A popup will ask you to verify your configuration, and you will need to click &#8220;Create Load Balancer&#8221; a second time. Just like that, your load balancer is up and running. If you find out that you&#8217;ve configured it incorrectly, don&#8217;t worry; it will be easy to change later.</p>
<p>Setting up the rest of your application code is beyond the scope of this article, but do note that our managed servers are already pre-configured to use the mod_zeus Apache module for proper logging and access control. </p>
<p>===</p>
<p><strong>Liquid Web&#8217;s Heroic Support is always available to assist customers with this or any other issue. If you need our assistance please contact us:<br />
Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:support@liquidweb.com">support@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/how-to-create-a-storm-load-balancer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Creating an Auto Responder in cPanel</title>
		<link>http://kb.liquidweb.com/creating-an-auto-responder-in-cpanel/</link>
		<comments>http://kb.liquidweb.com/creating-an-auto-responder-in-cpanel/#comments</comments>
		<pubDate>Fri, 08 Mar 2013 20:34:21 +0000</pubDate>
		<dc:creator>maurand</dc:creator>
				<category><![CDATA[Technical Support]]></category>
		<category><![CDATA[auto responder]]></category>
		<category><![CDATA[best support]]></category>
		<category><![CDATA[cpanel]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[heroic support]]></category>
		<category><![CDATA[liquid web]]></category>
		<category><![CDATA[managed hosting]]></category>
		<category><![CDATA[webhosting]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4552</guid>
		<description><![CDATA[The Auto Responder functionality allows for cPanel to send a pre-made response to e-mails that are received by a given e-mail account. This is extremely useful for when someone is away from their e-mail for an extended period of time and they want to convey that to other users. First you will want to login [...]]]></description>
				<content:encoded><![CDATA[<p>The Auto Responder functionality allows for cPanel to send a pre-made response to e-mails that are received by a given e-mail account. This is extremely useful for when someone is away from their e-mail for an extended period of time and they want to convey that to other users.</p>
<p><span id="more-4552"></span><br />
First you will want to <a href="http://kb.liquidweb.com/new-user-tutorial-logging-in-to-cpanel-services/">login to your cPanel account</a>. Once logged in, please navigate to the Auto Responder icon in the e-mail section of the front page.</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto1.jpg"><img class="size-full wp-image-4553 alignnone" alt="Auto Responder Location" src="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto1.jpg" width="497" height="168" /></a></p>
<p>Once on the Auto Responder page, click on the link to add an auto responder.</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto2.jpg"><img class="size-full wp-image-4558 alignnone" alt="auto2" src="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto2.jpg" width="640" height="264" /></a></p>
<p>That page will take you to a creation page, that will look like the following.</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto3.jpg"><img class="size-medium wp-image-4559 alignnone" alt="auto3" src="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto3.jpg" width="300" height="231" /></a></p>
<p>From here you can create the auto responder. There are many options you will need to input in order for the auto responder to work.</p>
<ul class="listingAlt">
<li><span style="line-height: 13px;">The Character Set allows you to change the character set that the e-mail is sent it. The default is utf-8, which should work for most users.</span></li>
<li>The Interval allows you to put a delay on when the auto responder will reply back to the person that e-mailed you. If set to zero, the system will respond as soon as the e-mail is received.</li>
<li>The Email section allows you to specify which e-mail you want the system catch e-mail for.</li>
<li>The From section allows you to specify a name of for the from line on the e-mail.</li>
<li>The Subject Line allows you to specify what the subject of the e-mail will be.</li>
<li>The HTML checkbox allows you specify whether the body of the e-mail contains HTML or not.</li>
<li>The Body section allows you to specify what the body of the message is going to be.</li>
<li>The Start and Stop sections allow you to specify the times you would like the auto responder to be active. By default, the responder will start immediately and have no end date.</li>
</ul>
<p>In addition to these options, cPanel provides three tags that can be used to personalize the message the auto responder sends.</p>
<ul class="listingAlt">
<li><span style="line-height: 13px;">The %subject% tag allows you to put the subject of the e-mail sent to auto responder in the message.</span></li>
<li>The %from% tag allows you to put the name of the sender in the message, but only if it&#8217;s available.</li>
<li>The %email% tag allows you to put the incoming e-mail into the message.</li>
</ul>
<p>This is what the auto responder form looks like completed.</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto4.jpg"><img class="size-medium wp-image-4560 alignnone" alt="auto4" src="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto4.jpg" width="300" height="229" /></a></p>
<p>Once you are happy with the auto responder, clicking on the Create/Modify button will create the auto responder itself. cPanel will bring you back to the main page where you will be able to modify or delete the auto responder as needed.</p>
<p><a href="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto5.jpg"><img class="size-medium wp-image-4561 alignnone" alt="auto5" src="http://kb.liquidweb.com/wp-content/uploads/2013/03/auto5.jpg" width="300" height="133" /></a></p>
<p>&nbsp;</p>
<p>If you ever find yourself having trouble creating an auto responder, please do not hesitate to contact our 24/7/365 support for assistance.</p>
<p>===</p>
<p><strong>Liquid Web&#8217;s Heroic Support is always available to assist customers with this or any other issue. If you need our assistance please contact us:<br />
Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:support@liquidweb.com">support@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/creating-an-auto-responder-in-cpanel/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Simple Domain Transfers With Liquid Web</title>
		<link>http://kb.liquidweb.com/simple-domain-transfers-with-liquid-web/</link>
		<comments>http://kb.liquidweb.com/simple-domain-transfers-with-liquid-web/#comments</comments>
		<pubDate>Fri, 01 Mar 2013 21:57:34 +0000</pubDate>
		<dc:creator>phawkins</dc:creator>
				<category><![CDATA[Billing + Manage]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4543</guid>
		<description><![CDATA[Your domain is the most irreplaceable part of your web presence. Recognizing this, the Internet Corporation for Assigned Names and Numbers (ICANN) has requirements in place that help keep domain transfers secure. Of course, following these requirements means that transferring domains takes a few more steps than you might otherwise think. Here are the steps [...]]]></description>
				<content:encoded><![CDATA[<p>Your domain is the most irreplaceable part of your web presence. Recognizing this, the Internet Corporation for Assigned Names and Numbers (ICANN) has requirements in place that help keep domain transfers secure. Of course, following these requirements means that transferring domains takes a few more steps than you might otherwise think. Here are the steps for transferring domains to and from Liquid Web:</p>
<p><span id="more-4543"></span></p>
<h2>From Registrar to Liquid Web</h2>
<p>Once the domain transfer is paid for, you will need to log into your current registrar and unlock your domain. You will also need a transfer secret or transfer code from your registrar, sometimes called an EPP code. Give this code to the support technician in your domain transfer ticket. They will use it to perform the next step of the registration process.</p>
<p>Once Liquid Web has asked your registrar for the domain, you will receive an email from our registrar asking for confirmation that you do indeed want to transfer the domain. You will need to follow the instructions provided in order for the transfer to go through.</p>
<h2>From Liquid Web to Another Registrar</h2>
<p>The process of moving your domain away from Liquid Web is the same process as above, only reversed. After the request has been made, a member of Liquid Web&#8217;s Heroic Support® Team will unlock the domain and send you a transfer code. You will have to follow your new registrar&#8217;s instructions for using that code to request the domain transfer.</p>
<p>If at any point in the domain transfer process you find yourself with a question, please do not hesitate to ask our 24/7/365 support for assistance.</p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/simple-domain-transfers-with-liquid-web/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ensure Your Electronic Payments are PCI DSS Compliant</title>
		<link>http://kb.liquidweb.com/electronic-payments-pci-dss-complicant/</link>
		<comments>http://kb.liquidweb.com/electronic-payments-pci-dss-complicant/#comments</comments>
		<pubDate>Fri, 22 Feb 2013 21:13:48 +0000</pubDate>
		<dc:creator>phawkins</dc:creator>
				<category><![CDATA[Featured Articles]]></category>
		<category><![CDATA[DSS]]></category>
		<category><![CDATA[eCommerce]]></category>
		<category><![CDATA[Enterprise]]></category>
		<category><![CDATA[Hosting]]></category>
		<category><![CDATA[Manged]]></category>
		<category><![CDATA[PCI]]></category>
		<category><![CDATA[PCI Compliant]]></category>
		<category><![CDATA[Web Host]]></category>
		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://kb.liquidweb.com/?p=4531</guid>
		<description><![CDATA[If you process credit cards on a website, your site needs to be in compliance with the Payment Card Industry Data Security Standard. (This is abbreviated as PCI DSS, and even more often referred to simply as PCI.) PCI compliance certifies that your organization takes all necessary steps to protect sensitive customer data and provides [...]]]></description>
				<content:encoded><![CDATA[<p>If you process credit cards on a website, your site needs to be in compliance with the Payment Card Industry Data Security Standard. (This is abbreviated as PCI DSS, and even more often referred to simply as PCI.) PCI compliance certifies that your organization takes all necessary steps to protect sensitive customer data and provides a set of standards for your infrastructure and server setup. While Liquid Web does not offer full PCI compliance certification, we do offer a separate service that scans your server to see that PCI DSS requirements are met, a great tool during the compliance process.</p>
<p><span id="more-4531"></span></p>
<h2>What PCI Compliance Entails?</h2>
<p>The Payment Card Industry Security Standards Council created the PCI DSS (Payment Card Industry Data Security Standard) as a response to the complex nature of keeping customer data safe and secure from outsiders. PCI DSS is a set of comprehensive requirements developed by major card brands to standardize data security measures. PCI DSS compliance is required by the Bank or Financial Institution that handles your credit card processing (Merchant Bank).</p>
<p>There are several steps required in order to ensure your site and server maintain PCI DSS compliance. The focus of these measures, as illustrated below, range from firewall configuration to unique usernames for each person that accesses information.</p>
<p>PCI DSS applies wherever account data is stored, processed or transmitted. Account Data<br />
consists of Cardholder Data plus Sensitive Authentication Data, as follows:</p>
<p>&nbsp;</p>
<table class="lw_blogTable" style="width: 100%;">
<tbody>
<tr style="background-color: #cccccc;">
<td><strong>Cardholder Data Includes:</strong></td>
<td><strong>Sensitive Authentication Data Includes:</strong></td>
</tr>
<tr>
<td>Primary Account Number (PAN)</td>
<td>Full Magnetic stripe data or equivalent on chip</td>
</tr>
<tr>
<td> Cardholder name</td>
<td>CAV2/CVC2/CVV2/CID</td>
</tr>
<tr>
<td> Expiration Date</td>
<td>PINs/PIN Blocks</td>
</tr>
<tr>
<td> Service Code</td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<p><strong>The primary account number is the defining factor in the applicability of PCI DSS requirements. </strong>PCI DSS requirements are applicable if a primary account number (PAN) is stored, processed, or transmitted. <strong>If PAN is not stored, processed or transmitted, PCI DSS requirements do not apply.</strong></p>
<p>If cardholder name, service code, and/or expiration date are stored, processed or transmitted with the PAN, or are otherwise present in the cardholder data environment, they must be protected in accordance with all PCI DSS requirements.</p>
<p>The following table illustrates commonly used elements of cardholder and sensitive authentication data, whether storage of each data element is permitted or prohibited, and whether each data element must be protected. This table is not exhaustive, but is presented to illustrate the different types of requirements that apply to each data element.</p>
<p>&nbsp;</p>
<table class="lw_blogTable" style="width: 100%;">
<tbody>
<tr style="background-color: #cccccc;">
<td><strong>Data Element</strong></td>
<td><strong>Storage Permitted?</strong></td>
</tr>
<tr>
<td>Primary Account Number (PAN)</td>
<td>Yes</td>
</tr>
<tr>
<td> Cardholder name</td>
<td>Yes</td>
</tr>
<tr>
<td> Service Code</td>
<td>Yes</td>
</tr>
<tr>
<td> Expiration Date</td>
<td>Yes</td>
</tr>
<tr>
<td> Full Magnetic Stripe Data</td>
<td>No</td>
</tr>
<tr>
<td>CAV2/CVC2/CVV2/CID</td>
<td>No</td>
</tr>
<tr>
<td>PIN/PIN Block</td>
<td>No</td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<p>There are a number of levels that merchants fall under. These different levels include various measures of security and practices. Currently there are four Merchant Levels. These levels range between the number of Visa or Mastercard e-commerce transactions per a year.</p>
<p>&nbsp;</p>
<table class="lw_blogTable" style="width: 100%;">
<tbody>
<tr align="center">
<th>Merchant Level</th>
<th>Criteria</th>
<th>Validation Actions</th>
<th>Validation Entity</th>
</tr>
<tr>
<td align="center">
<h2>1</h2>
</td>
<td>Any merchant processing more than six million VISA transactions per a year.<br />
Any merchant that has suffered a hack or an attack that resulted in data being compromised.<br />
Any merchant that is identified as a Level 1.</td>
<td>Annual on-site security audit and quarterly network scan</td>
<td>You can have an independent security assessor.<br />
Internal audit, if signed by an officer of the company. Qualified independent scan vendor.</td>
</tr>
<tr>
<td align="center">
<h2>2</h2>
</td>
<td>One million to six million Visa or MasterCard transactions per a year.</td>
<td>Annual PCI Self-Assessment Questionnaire and quarterly network scan.</td>
<td>Merchant qualified independent scan vendor.</td>
</tr>
<tr>
<td align="center">
<h2>3</h2>
</td>
<td>20,000 to one million Visa or MasterCard e-commerce transactions per a year.</td>
<td>Annual PCI Self-Assessment Questionnaire and quarterly network scan.</td>
<td>Merchant qualified independent scan vendor.</td>
</tr>
<tr>
<td align="center">
<h2>4</h2>
</td>
<td>Less than 20,000 Visa or MasterCard e-commerce transactions per year, and all other merchants processing up to one million Visa or MasterCard transactions per year.</td>
<td>Recommended annual PCI Self-Assessment Questionnaire and quarterly network scan.</td>
<td>Merchant qualified independent scan vendor.<br />
While compliance is mandatory for level 4 Merchants, validation is optional, but recommended.</td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<h2>Guidelines to be PCI DSS Compliant</h2>
<p>There are industry tools and measurements to help ensure the safe handling of sensitive information such as credit card numbers. The following framework will assist you to develop a robust account data security process &#8211; including preventing, detecting and reacting to security incidents. To reduce the risk of compromise and mitigate its impacts if an incident occurs, it is important that all entities storing, processing, or transmitting cardholder data be compliant.</p>
<p><strong>Framework to become PCI DSS Compliant (Basic Checklist). </strong><a href="https://www.pcisecuritystandards.org/documents/navigating_dss_v20.pdf">Please see the attached PDF for a complete guide.</a></p>
<p><strong>I. Ensure that you comply with PCI DSS Requirements:</strong></p>
<p><strong><strong>  </strong>A. </strong><strong>Build and Maintain a Secure Network</strong></p>
<p style="padding-left: 30px;"><span style="font-size: 13px; line-height: 19px;">- Install and maintain a firewall configuration to protect cardholder data.</span><br />
<span style="font-size: 13px; line-height: 19px;">- Do not use vendor-supplied defaults for system passwords and other security parameters.</span></p>
<p><strong>   B. Protect Cardholder Data</strong></p>
<p style="padding-left: 30px;"><span style="font-size: 13px; line-height: 19px;">- Protect stored cardholder data.</span><br />
<span style="font-size: 13px; line-height: 19px;">- Encrypt transmission of cardholder data across open, public networks.</span></p>
<p><strong>   C. Maintain a Vulnerability Management Program</strong></p>
<p style="padding-left: 30px;"><span style="font-size: 13px; line-height: 19px;">- Use and regularly update anti-virus software or programs.</span><br />
<span style="font-size: 13px; line-height: 19px;">- Develop and maintain secure systems and applications.</span></p>
<p><strong>   D. Implement Strong Access Control Measures</strong></p>
<p style="padding-left: 30px;"><span style="font-size: 13px; line-height: 19px;">- Restrict access to cardholder data by business need to know.</span><br />
<span style="font-size: 13px; line-height: 19px;">- Assign a unique ID to each person with computer access.</span><br />
<span style="font-size: 13px; line-height: 19px;">- Restrict physical access to cardholder data.</span></p>
<p><strong>   E. Regularly Monitor and Test Networks</strong></p>
<p style="padding-left: 30px;"><span style="font-size: 13px; line-height: 19px;">- Track and monitor all access to network resources and cardholder data.</span><br />
<span style="font-size: 13px; line-height: 19px;">- Regularly test security systems and processes.</span></p>
<p><strong>   F. Maintain an Information Security Policy</strong></p>
<p style="padding-left: 30px;"><span style="font-size: 13px; line-height: 19px;">- Maintain a policy that addresses information security for all personnel.</span></p>
<p><strong>II. Complete a PCI DSS Self Assessment</strong></p>
<p><strong><strong>  </strong>A. Complete the Self Assessment Questionnaire that applies to your specific case (Categories include A through D)</strong></p>
<p style="padding-left: 30px;"><strong>Customers are required by the Payment Card Industry Security Standards Council to complete an SAQ (Self Assessment Questionnaire)</strong>. The purpose of this Questionnaire is to ensure that customers have certain policies and procedures in place that will allow their organization to achieve full compliance. This questionnaire <span style="text-decoration: underline;">must be completed by the applicant</span>. It is not legally permissible for Liquid Web to complete a document that requires specific information directly pertaining to an applicant&#8217;s organization policies and procedures. The Self-Assessment Questionnaire is intended to be completed by your own staff. Companies that outsource all web application, card data handling, and server functions will have the least to do. Companies that write their own code and manage their own data storage will need some input from their technical staff. The first time through will take the longest and subsequent filings will go much faster.</p>
<p style="padding-left: 30px;">There are 5 versions of the Questionnaire. Version A is just a couple of pages long and could be done in less than an hour, including all the reading it requires. Version D is just 3 pages long for merchants, much more involved for service providers.</p>
<p style="padding-left: 30px;">Please reference the table below to determine which one you should complete. <a href="https://www.pcisecuritystandards.org/documents/pci_dss_SAQ_Instr_Guide_v2.1.pdf">Please review the attached PDF for more information.</a> Liquid Web will provide its customers a copy of its Self Assessment Questionnaires type D (SAQ-D), which is also required.</p>
<table class="lw_blogTable" style="width: 100%; padding-left: 30px;">
<tbody style="padding-left: 30px;">
<tr style="padding-left: 30px;" align="center">
<th>SAQ</th>
<th style="padding-left: 30px;">Description</th>
</tr>
<tr style="padding-left: 30px;">
<td style="width: 15%;" align="center">
<h2>A</h2>
</td>
<td style="padding-left: 30px;">Card not present (ecommerce or mail/telephone order) merchants, all cardholder<br />
data functions outsourced. This would never apply to face to face merchants.</td>
</tr>
<tr style="padding-left: 30px;">
<td style="width: 15%;" align="center">
<h2>B</h2>
</td>
<td style="padding-left: 30px;">Imprint-only merchants with no electronic cardholder data storage, or standalone, dial-out terminal merchants with no electronic cardholder data storage. This would never apply to e-commerce merchants.</td>
</tr>
<tr style="padding-left: 30px;">
<td style="width: 15%;" align="center">
<h2>C-VT</h2>
</td>
<td style="padding-left: 30px;">Merchants using only web-based virtual terminals, no electronic cardholder data storage. This would never apply to e-commerce merchants.</td>
</tr>
<tr style="padding-left: 30px;">
<td style="width: 15%;" align="center">
<h2>C</h2>
</td>
<td style="padding-left: 30px;">Merchants with payment applications systems connected to the internet, no electronic cardholder data storage.</td>
</tr>
<tr style="padding-left: 30px;">
<td style="width: 15%;" align="center">
<h2>D</h2>
</td>
<td style="padding-left: 30px;">All other merchants not included in descriptions for SAQ types and through C above, and ALL SERVICE PROVIDERS defined by a payment brand as eligible to complete and SAQ.</td>
</tr>
</tbody>
</table>
<p style="padding-left: 30px;">All SAQ forms can be located at the following site:</p>
<p style="padding-left: 30px;"><a href="https://www.pcisecuritystandards.org/security_standards/documents.php?agreements=pcidss&amp;association=pcidss">https://www.pcisecuritystandards.org/security_standards/documents.php?agreements=pcidss&amp;association=pcidss</a></p>
<p><strong><strong><strong>  </strong>B. Complete an Attestation of Compliance. The form can be located at the following link: </strong></strong></p>
<p style="padding-left: 30px;"><a href="https://www.pcisecuritystandards.org/documents/AOC_SAQ_A_v20.doc">https://www.pcisecuritystandards.org/documents/AOC_SAQ_A_v20.doc</a></p>
<p style="padding-left: 30px;">The Attestation of Compliance (AOC) is where your company attests that it&#8217;s in compliance with the Data Security Standard annually. There are 5 versions of the Attestation of Compliance, just as there are 5 versions of the Self Assessment Questionnaire. If you qualify to use version A of the Questionnaire, use version A of the Attestation, etc.</p>
<p style="padding-left: 30px;">For more information on how to select the correct Attestation of Compliance for your company, please visit this page: <a href="https://www.pcisecuritystandards.org/saq/index.shtml">Attestation of Compliance versions A through D</a></p>
<p style="padding-left: 30px;">Liquid Web will also provide its Attestation of Compliance, which is also required for certification.</p>
<p><strong>III. Perform Quarterly ASV Scan</strong></p>
<p><strong><strong>  </strong>A. It is not required that four passing quarterly scans must be completed for initial PCI DSS compliance if the assessor verifies:</strong></p>
<p style="padding-left: 30px;"><span style="line-height: 12.986111640930176px; font-size: 13px;">- The most recent can result was a passing scan,</span><br />
<span style="font-size: 13px; line-height: 19px;">- The entity has documented policies and procedures requiring quarterly scanning going forward, and</span><br />
<span style="font-size: 13px; line-height: 19px;">- Any vulnerabilities noted in the initial scan have been corrected as shown in a rescan.</span></p>
<p style="padding-left: 30px;">For subsequent years after the initial PCI DSS review, four passing quarterly scans must have occurred. Scan must cover all externally accessible (Internet-facing) IP addresses in existence at the entity.</p>
<p>It is recommended that Liquid Web customers consult with a certified Auditor in order to ensure their application will be compliant. The above documentation needs to be submitted to your Financial institution as proof of compliance.<br />
<b id="internal-source-marker_0.8909943704493344"><br />
Please do not hesitate to contact a Sales Engineer if you have questions pertaining PCI DSS Compliance. </b><strong style="font-size: 13px; line-height: 19px;"> If you need our assistance please contact us:</strong></p>
<p><strong> Toll Free 1.800.580.4985<br />
International 517.322.0434<br />
<a href="mailto:sales@liquidweb.com">sales@liquidweb.com</a><br />
<a href="https://manage.liquidweb.com/">https://manage.liquidweb.com/</a></strong></p>
]]></content:encoded>
			<wfw:commentRss>http://kb.liquidweb.com/electronic-payments-pci-dss-complicant/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
