MNSP and POS Security

In 2019, both of the leading retail petroleum POS platform providers, Verifone and Gilbarco, will transition from directly providing a network security solution to a certified Managed Network Service Provider (MNSP) program.  This has been prompted by the network brands who have made MNSP a requirement.  To maintain secure remote access for helpdesk support and software updates, both Verifone Commander and Gilbarco Passport customers must transition to a certified MNSP. Using a certified MNSP is also a key requirement for supporting outdoor EMV transactions. 

Transitioning to the certified MNSP program requires a significant change to the store's network architecture.  The current POS firewall must be removed and replaced with an MNSP network security solution.  Previously, both Verifone and Gilbarco included a network security firewall as part of their POS platform to enable remote access for their helpdesk. Verifone used the Edge Zone Router (EZR) and Gilbarco used the RV042. Both products have reached End-Of-Life and must be replaced. The functionality of these boxes will now become the responsibility of certified MNSPs. 

With the new MNSP program and the upcoming Outdoor EMV Liability shift, retail petroleum is undergoing a dramatic amount of change in a short period of time. The certified MNSP program not only represents an opportunity to improve the security posture, PCI compliance, and reliability of the store network, but also an opportunity to prepare the store network for numerous future initiatives, including Outdoor EMV, contactless payments, mobile pay, back office cloud applications, tank monitoring, digital menu boards, and more.

 

* In October 2020, the liability for fraudulent transactions conducted with EMV capable cards at the pump will shift to those operators who have not upgraded their dispensers to support EMV transactions.  Depending on the levels of fraudulent transactions, after October 2020, operators who fail to upgrade their pumps may incur thousands of dollars in monthly chargeback fees. Operators who have not yet upgraded their dispensers should act quickly. Migrating to a certified MNSP is a key step in the Outdoor EMV upgrade.