Security and regulatory concerns slow some server virtualization efforts
Security and regulatory concerns have some users warily eyeing the move to server virtualization.
For example, during the past year, the Stanford Hospital & Clinics, part of Stanford University in Palo Alto, Calif., has shifted about half of its applications from traditional server platforms to VMware-based virtual machines (VM) -- and found it strongly impacted decision-making on security.
"You change the character of the IT infrastructure," says Mike Mucha, information security officer at the hospital, about what he's seen in virtualization's impact. "There's uncertainty."
"Virtualization tends to be an extension of the server component and it's led by the server team," Mucha says. But virtualization's switching aspect means the traditional network itself is altered, which Mucha notes has generated some "pushback" from the network and storage teams that also have to be at the table when it comes to making decisions.
"The server people are taking on non-traditional roles, making decisions about network architecture," he says about virtualization's impact in his organization.
Security questions come up, such as where to deploy intrusion-detection and management systems or firewalls, in a virtualized world.
There's awe in the instantaneous speed that VMware offers in set up and tear down of VMs but worry about potential abuse of that power, too, deliberate or unintentional.
Mucha decided Stanford Hospital & Clinics would benefit by adding another layer of security controls for VMware's ESX servers and management console by inserting the policy-enforcement appliance from start-up HyTrust.
The HyTrust appliance places controls on administrative and user decision-making responsibilities, plus adds some VM-focused intrusion-detection capability.
"It gives us some controls," Mucha says, adding when it comes to virtualization, a new era of risk mitigation is emerging that has to be addressed, especially as Cisco, Juniper and other traditional switch vendors introduce further virtualized switching technologies.
Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world
On Twitter now
virtualization
Powered by Twitter
jfruh
Apple syncing patent can't come soon enough
pasmith
New Twitter features borrow from 3rd party clients
Esther Schindler
Open Source Changes the Software Acquisition Process
mikelgan
How to set up continuous podcast play on the new iTunes
David Strom
Five important Windows 7 mobility features
sjvn
Guard your Wi-Fi for your own sake
Sandra Henry-Stocker
Grepping on Whole Words
Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.












