I have been working with security technology, including SIEM solutions, data security such as Thales, Forcepoint, Fortinet, and Palo Alto. I worked with FortiGate with Thales and have experience with Thales technologies such as payShield and Luna, including Luna CM. I act as a vendor in some projects, but we are distributors and partners for Thales. I work with all versions of Thales payShield, the latest version, and sometimes with version 1.88, including any version that's PCI certified. Thales payShield's key management capabilities are excellent. We are able to generate and encrypt keys under the LMKs, integrating with multiple applications that work with PCI or not. We have many tools, such as remote payShield manager, that help us manage the keys. The audit mechanisms for Thales payShield are very good, as it can work with our monitoring tool called payShield Monitor, and we can integrate it with multiple monitoring tools or SIEM solutions. Since firmware 2.0, we can add the syslog server for it, enabling us to monitor and audit the HSM and smoothly import audit logs without needing back-to-back connectivity to data centers. Sometimes we face challenges with host commands, but those usually come from application teams, not from payShield itself. They have issues during application development that integrate with the HSM. Thales payShield can adapt to customer needs by adding necessary security parameters from the beginning. We can perform auditing on the security settings of the HSM to work with applications and add PCI DSS certificates if required. We can also configure remote connections using the payShield manager, which is secure and beneficial for transaction handling. The HSM does not store keys, so it's adaptable to any application easily. I rate Thales payShield a ten out of ten.
