Hi Guys,
We are planning to integrated virtual server environment in our network, some of the servers are available for internet users, like webserver, domain controllers and some of the servers are backend like dbases etc......
What are the best practice for securing such en environment?
For now i have have provided these basic factors to be consider:
There are 3 security zones, Zone 1 for external servers, zone 2 for internal(databases),zone 3 is monitoring or logging.
- No 2 zones communicate each other without firewall. Zone 2 is only private address and zone 1 is public address.
- Virtual servers connected to zone 1 must be run on separate hardware than servers connected only to zone 2 (e.g. a separate VMware ESX cluster).
- A physical server cannot provide virtual machines for several security zones.
Please add. Thnx for advance.
