I run a small business that handles credit card point of sales transactions over my business internet account.
Per some updated regulations with the credit processing company, they now have a requirement that the hardware used at my business be protected against certain attacks.
Here is the specific requirement:
"Implement anti-spoofing measures to detect and block forged source IP addresses from entering the network (1.3.4): In an attempt to bypass your firewall, cyber attackers will try and spoof packets using the internal IP range of your network to make it look like the request originated internally. Enabling the IP spoofing feature on your firewall will help prevent these types of attacks."
I am currently using a Linksys BEFSX41 network router, which has a firmware based firewall. However, I am having trouble determining if an "IP spoofing feature" is already part of the Linksys firmware or if I need to purchase a new router for this capability. My research so far shows that there are certain enterprise-level Cisco devices that explicitly mention this feature, but they seem to be outside of my price range.
What models exist that have this feature and are more reasonably priced than enterprise-grade equipment?
The network at my business is a couple of workstations, some network attached storage, a printer, and some point of sale devices. DHCP is enabled on the router firmware.
Please let me know if I can provide any additional information. I'm a bit naive in this area of computing.