One more note on this topic.

In doing some searches I found the following PCI discussion regarding
2.2.1 (single use of machine):
http://forum.aegenis.com/archive/index.php?t-61.html

I know this won't settle the argument :) but hopefully it will continue
the discussion (offline?) where people can determine what is needed to
accept virtualization for both firewalls and production servers in
compliant environments.

David

[ reply ]