Thank you for taking the time to report the following comment to the administrator of this site.
Please complete this short form and click the submit button to process your report.
Comment in question
Posted by Paul, on 22-07-2008 05:25,
VMWare Best Practice article is great. I think that is a very logical approach for isolating servers into multiple DMZs. However, I still worry about some sort of hyperjacking or any guest to host escalation that could compromise the hypervisor. Traditional security models do not permit for single points of failure, but when a physical host spans multiple security zones there is a single point of risk. That is the hypervisor. I think that there may be cases with similar but separate security zones that this may be acceptable.
