Sercurity risk of VMware between internal and DMZ network

[pjacinthe]

                 What are the sercurity concerns of having VMware Cluster with your DMZ and internal network on it? What are the pros and cons? Would someone be able to break into the kernal of the machine from the DMZ and than get into your internal network?

[Collin Clark]

I've never heard of anyone doing it, but that doesn't mean it can't be done. The vSwitches are pretty transparent and there two common design fixes for it; install the Cisco Nexus 1000v which replaces the VM vSwitch and gives you some insight and/or create a dedicated DMZ host for the DMZ VM's. Neither of them cheap