Hi Netman,

Have you heard of Configuresoft's ECM (Enterprise Configuration Manager). Our Center for Policy & Compliance has created a complete toolkit for PCI-DSS that comes with ECM out of the box (we also have SOX, GLBA, HIPAA, FISMA, etc...)

ECM will discover all servers and desktops touching your network (Win, Unix, Linux) and collect a baseline of all configuration settings, sw,hw, services, permissions, etc... Then using the PCI template ECM will compare all your machines to determine your state of compliance. Then you can use ECM to do full remediation, whether it means pushing out the latest hotfix, stopping a service or changing a security setting in bulk to all machines. Then you can have ECM alert you going forward of any machines drifting away from your standards.

Let me know if you want to see a demo or you need more info. My email address is charlotte.rickert@configuresoft.com and my number is 719-687-1656 Thanks!!