I don't think there is any restriction on using virtual firewalls as long as
it is deployed in the network to protect card holder servers. PCIDSS does
not exactly define actual requirements of security devices. Based on my
interpretation of standards and typical industrial best practices, I have
put...

[ more ]