World Pay Card Payment Services

[dapaulio]

Afternoon All

Just sniffed out another potential purchase that could have gone horribly wrong because no one had consulted ICT and the school was going to go on the assumption that everything just slots in to every network nicely because the nice sales man said it would scenario,

 

Our finance dept want to commit to and subscribe to WorldPay service on a Wifi enabled credit card payment device and I am concerned about filtering and firewall rule.

WorldPay haven't managed to provide any documentation yet and wondered if anyone has any experience they can offer

 

Also I read that the "merchant" referring to us require ideally 2 public IP addresses, one for a test environment and the other for the production, which is registered on their system to authenticate the devices use. Is this accurate? can complicate things a little as we have a county fed internet, web filtering, firewall, we have used all our allocated public IP address etc dualed up with a BT infinity line which acts as load balance and failover. Essentially we have two internet bound ip addresses. granted I can set up so that certain traffic can route out of any one of the interfaces and therefore should be ok but anyone know of any reason why this wouldn't work.

 

Part of me thinks ask the school to get a gprs or 4g device which will make setup far more simple but would like to have felt I have tried to research all avenues

 

Thanks

[Oaktech]

Get a mobile phone based one. You are in for a world of pain.

[dapaulio]

Get a mobile phone based one. You are in for a world of pain.

 

That’s what I thought from what I read up on so far. Reinforced with world pay not able to provide basic networking information is not filling me with confidence

[matt40k]

Sounds overly complex, I mean whats wrong with the PayPal Here or one of the others - which aren't they just plug and play kinda thing - ie they connect to an iPad which then just connects to a secure website (or am I missing something??)

[fiza]

Our cashless caterers use iZettle. As mentioned it just pairs with an App and away you go. https://www.izettle.com/gb

[MatthewL]

SIM based one or one that plugs into a PSTN. Be careful on the transaction charges, some don't charge you for contactless so you can save money

[dapaulio]

Sounds overly complex, I mean whats wrong with the PayPal Here or one of the others - which aren't they just plug and play kinda thing - ie they connect to an iPad which then just connects to a secure website (or am I missing something??)

 

I think Paypal are generally quite expensive in comparison on the per transaction. I know a few small business owners who use PayPal and the general consensus is you pay extra from the convenience and simplicity of the whole package.

[dapaulio]

SIM based one or one that plugs into a PSTN. Be careful on the transaction charges, some don't charge you for contactless so you can save money

 

I am steering more and more toward a sim based device but I am aware that it’s cost is a lot more than the WiFi only for obvious reasons.

 

The device will be used in the school uniform shop

 

I guess if they wanted to really save money the person who runs the shop could set up a WiFi hotspot from their mobile device but that would depend on that person’s wanting to use their personal data as little as it consumes per transaction for nothing in return other than good will in facilitating the school to profit.

 

World pay estimate each transaction is 2kb when I upgrade can be up to 10mb twice a year.

[Katy]

Is this for physical card transactions (i.e. a card machine, not online payments)? We have two ingenico machines from the bank, nothing special needed setting up - they can either plug into a standard phone line or into the network. Didn't have to do anything besides set up a DHCP reservation for each device and turn off filtering for them, it connects and just works - didn't need to tell them public IP addresses or anything like that.

They do wireless version which I think are bluetooth to the base station (which is then plugged into the phone or network), but we manage with the cabled ones - there's a customer pad similar to what you see on tills in supermarkets and the merchant pad which has all the connections, the receipt roll etc.

[ass17]

We gave a world pay WiFi card machine, goes on a separate isolated WiFi network. It goes through our smoothwall with no filtering, we just had to open three firewall ports.

[dapaulio]

We gave a world pay WiFi card machine, goes on a separate isolated WiFi network. It goes through our smoothwall with no filtering, we just had to open three firewall ports.

 

Can you remember the ports rules you made?

[ass17]

Will let tomorrow when back at work [emoji1303]

[matt40k]

I think Paypal are generally quite expensive in comparison on the per transaction. I know a few small business owners who use PayPal and the general consensus is you pay extra from the convenience and simplicity of the whole package.

 

I agree, but there are other similar solutions out there that would be cheaper. Its a good first step - I mean, if this is the first time accepting card, how do you know you won't spend alot of time and money on a solution that you use 3 times in a year

[Jamman960]

We've got worldpay phone/ip terminals, I initially had them connected up directly to a phone line to minimise security requirements then when we had issues they ended up being on the LAN - we get a lengthy questionnaire about PCI compliance each year, if we don't comply there's a £20/mo non-compliance fee.

 

We mainly used them for collecting fee's but now that we can't charge the card fee's back we're getting rid of them in favor of online payments via wisepay and bank transfers. They also offer a web based card terminal.

 

We've not had to issue any public IP's - they're just like any other wireless device, they create a secure connection back to the bank and go from there.

Edited April 24, 2018 by Jamman960

[ass17]

Ports are:

 

TCP/UDP 10,000

TCP/UDP 45,000-46,000

[Oaktech]

I'd just like to add a +1 for iZettle. I've set it up for a couple of people (A dog groomer and a Forever Aloe consultant) and I have a few other friends (they're Etsy types who do craft fairs) who came to it on their own and everyone who uses it seems to really rate it.

[matt40k]

we get a lengthy questionnaire about PCI compliance each year, if we don't comply there's a £20/mo non-compliance fee.

 

This is the funniest thing I've read in a long time.

[dapaulio]

we get a lengthy questionnaire about PCI compliance each year, if we don't comply there's a £20/mo non-compliance fee.

 

...

 

We've not had to issue any public IP's - they're just like any other wireless device, they create a secure connection back to the bank and go from there.

 

I read that ideally 2 public IP address are required to authenticate the transaction. Is this not the case with you?

 

Also what in their opinion is non compliance? Can you give me an example?