Frequently Asked Questions

For PCI DSS Requirement 4.1, digital leased lines are generally considered to be private since they are dedicated to the individual customer's traffic.

This determination, however, is dependent upon the specific implementation and configuration.  If a leased line was shared with unknown or untrusted parties, or provided exposure to the Internet, it may be considered an open or public connection.