Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here


PCI Compliance using Eckoh

PCI Compliance using Eckoh

PCI Compliance using Eckoh

Does anyone have any experiance intergrating the Eckoh Callguard PCI Compliance system to a Nortel CS1000 ? We have two call centers still running CS1000/Symposium and we are being forced into installing the Eckoh PCI Compliance system . Eckoh doesn't seem to have any expertise in adapting their "solution" to the customer equipment , just wondering if anyone has been down this roade before . Thanks in advance !

RE: PCI Compliance using Eckoh


We're using Callguard PCI. Seems to work well. there's a usb device that sits between the agents headset and handset. This is controlled by a small application on the users PC's and sorts the DTMF. the unit also acts as a usb keyboard.

There's also a server that sits infront of our call recorder that tones out any dtmf tones so you can't get the details from a voice recorder.

The application sits and waits to recognise the payments page and then "padlocks" the relevant payments pages. the caller will use their keypad to enter the account number, svc etc the agent just hears beeps and the screen gets populated with the details, again the agent cant see the numbers as all they get are dots.

Works fairly well for us but we do sometimes get delays that prevent the padlocks appearing on the payments page, but that's our hyper-v environment

It's not getting any smarter out there. You have to come to terms with stupidity, and make it work for you.

RE: PCI Compliance using Eckoh

Mikeyb123 , We are using the Eckoh system , formally know as Call Guard . What sort of USB device did they provide ? We have the audio appliances installed between the telco and the PBX , the appliances are monitoring all of the local and LD circuits for the entire facility , not just the call center . The audio appliance ( I call it " The Wiretap ) listens for DTMF tones , when it hears the tones , it captures , creates a spoken token . The appliance plays the spoke token to the agent instead of the actual credit card number . They are wanting to go to an always off mode due to the fact that the system also hears DTMF tones for conference bridge call , IVR , etc . When the system hears these DTMF tones and they are less than the length of a CC , the system freaks out and broadcasts an error message to whoever is on an active call . The vendor can't figure out how to disregard the non CC DTMF strings so , they want to go to the always off configuration . Of course , this puts the responsibility of turning it on back on the agents , kind of defeats the purpose of the compliance .WE have other sites that are using the Cisco CM/UCCX systems , we had to do some tinkering in the UCCX Desktop manager to create a applet that turns on the tokenization when the agent logins in . When they login , the applets send a #855 DTMF string to the Eckoh server , this turns on the monitoring for that agent . I don't see why the vendor's appliance just can't ignore any DTMF strings that are less than the length of a CC , guess that would be too easy .
Can you provide more detail about your USB device ?
Thanks for your time and assistance .

RE: PCI Compliance using Eckoh


so we are only recording on extension side rather than trunk side so makes our solution a bit simpler..

CallGuard System Overview
CallGuard is an add-on to your existing call recording system. It is a simple and neat solution which allows you to meet PCI DSS guidelines banning the storage of credit card data in recorded calls and also retain the benefits of your chosen call recording system. It enables your customers to communicate payment card details by using their telephone key pad, and (unlike an IVR) means that the agent and caller are never disconnected from each other and are able to talk freely throughout the card transaction. CallGuard’s approach uses 2 separate hardware elements: the Decoder and the Filter. Each device acts independently, and there is no communication needed between them.

Core element: CallGuard Decoder
The Decoder is a small USB device. It connects each Agent’s telephone with their computer. You need one Decoder for each Agent taking card payments.

Core element: CallGuard Filter
The CallGuard Filter is a hardware device which sits in line with your existing call recorder. It listens for customers’ DTMF tones, and stops them from getting through to your recorder. Your recordings therefore will not contain any card data. The Filter is also ‘plug and play’ and does not require any configuration.
A Filter is required for each call recording device you currently have.

It's not getting any smarter out there. You have to come to terms with stupidity, and make it work for you.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close