Re: Virtualization and Security ?

[Clifford Collins <collinsc () FRANKLIN EDU>]

I applaud everybody's efforts to secure their VMware environments. I too am in the process of arguing for similar "best 
practices" as we deploy VMware.  However, I'm getting pushback because the decision-makers have not heard of any 
industry "best practices" to justify the extra work and expense. Would any of you please bring to my attention 
documentation to justify our position? Thanks in advance for the help! 

Clifford A. Collins 
Information Security Officer 
Franklin University 
201 South Grant Avenue 
Columbus, Ohio 43215 
"Security is a process, not a product" 

----- Original Message ----- 
From: "Anand Malwade" <malwadan () SHU EDU> 
To: SECURITY () LISTSERV EDUCAUSE EDU 
Sent: Monday, November 10, 2008 5:11:59 PM GMT -05:00 US/Canada Eastern 
Subject: [SECURITY] Virtualization and Security ? 


Folks, 

We are looking into Data Center Consolidation and plan to virtualize most of our servers. Now Virtualization can yield 
sigificant operational advantages, but  also introduces among others network, security complexity and management 
challenges. 

My question to the forum is 

a) Is anyone fully virtualized ?  If so was a Vendor hired to perform this function and are there any lessons learnt  
that i should be aware of with the deployment? 

b) Has anyone run into significant Security and Risk Issues. 


Thanks, 
Anand 


Anand Malwade 
Information Security Officer, 
Seton Hall University, 
Tel: 973 275 2209 
malwadan () shu edu