From a compliance perspective, separate devices is just that. It does not matter if virtual hosts do or do not work, the are the same device and thus are a single device with multiple purposes.

Whether you can or if it will work is irrelevant. This is something where a breach is decided in court. ...

[ more ]