PCI DSS 2.0 discussed on The Virtualization Security Podcast

In the last Virtualization Security podcast on 12/2 we had with us members of the PCI DSS Virtualization Special Interest Group (SIG). Kurt Roemer of Citrix and Hemma Prafullchandra of HyTrust joined us to discuss the differences to the PCI DSS 2.0 with respect to virtualization. In essence, PCI DSS explicitly calls out the need to bring virtualization, people, and processes into scope.

As we discussed in a previous article, the PCI DSS 2.0 does not state exactly what needs to be assessed within the virtual environment, or even what part of the virtual environment is a concern of each aspect of the PCI DSS. What the PCI DSS 2.0 does do is change the language, however subtle, that technologies employing shared resources are now acceptable. Continue reading PCI DSS 2.0 discussed on The Virtualization Security Podcast

Lifecycle What?

Since its inception, virtualization has changed the information technology landscape in many ways.  With all the good that virtualization brings to the table, in some ways, it has made our jobs too efficient. One example is the ease and speed that we are able to deploy new servers.  No longer are we waiting on physical hardware to arrive for a new deployment.  We can “clone” our golden image in a matter of minutes and be on our way.

With the ease that virtualization brings to the table, it also introduces new issues into our day to day life as the administrator and care takers of the environment.  Life Cycle Management can be one of those very issues.  I have worked in several different types of environments over the years. One client, in particular, had life cycle management down to a science for any and all servers in the infrastructure.  Every month, we would get the monthly decommission list of all virtual and physical servers slated for end of life. It took longer to fill out the paper work than to actually get rid of the server. Continue reading Lifecycle What?

Performance Management for Platform as a Service (PaaS) Clouds

For a developer, and subsequently the team of people that has to support certain kinds of applications in production, a PaaS cloud can be a wonderful thing. Why can a PaaS cloud be so wonderful? Because if you have a web based application based upon Java, Ruby-on-Rails,  or .NET you can find a cloud provider that handles the entire hardware and software platform for your application. Continue reading Performance Management for Platform as a Service (PaaS) Clouds

Sorting Out “Desktop Virtualization”

DesktopVirtualizationCan you use Desktop Virtualization in your organization to improve IT delivery? Desktop Virtualization, as a concept, is straightforward – separate the desktop environment from the physical machine. This gives you benefits in terms of speed of delivery, how you can provide access to mobile and remote workers, how you can ensure security and compliance.

On the other hand – Desktop Virtualization, as a task,  is complex, it requires different technologies and practices to traditional desktop deployment. The task is further complicated because Desktop Virtualization, as a term, is applied to a variety of solutions. These include VDI (Virtual Desktop Infrastructure), HVD (Hosted Virtual Desktops), DaaS (Desktops as a Service), the use of Type 1 or Type 2 Hypervisors to create a “corporate sandbox” on an end-user workstation, and finally some new and enhanced desktop management techniques that deliver benefits of “Desktop Virtualization”, but without the data center server resource typically associated with this type of solution.

A number of vendors offer desktop virtualization solutions – how can you compare those offerings and relate them to what you need your desktop delivery strategy to do for your business?

Continue reading Sorting Out “Desktop Virtualization”

Browsium crafts lifeline for IE 6 users

Startup Browsium, is readying a lifeline for enterprise IT organizations that moving to Windows 7 but unable to escape their addiction to Internet Explorer 6. The Redmond-based startup staffed by ex-Microsoft employees is planning to release UniBrows an add-on for Internet Explorer 8 that lets customers access IE6 dependent web apps from the now defacto standard that is IE 8. Continue reading Browsium crafts lifeline for IE 6 users

Red Hat Acquires PaaS Cloud vendor Makara to help compete with VMware’s vFabric

Red Hat announced on November 30, 2010, for an undisclosed sum, the acquisition of startup PaaS vendor, Makara, which provides a deployment platform for most of the Open Source application stacks (Apache, MySQL, PHP, Java, Tomcat and JBoss) onto most of the IaaS cloud infrastructures (Amazon EC2,   Amazon VPC,  Rackspace Cloud, VMware vCloud, Terremark, Cloud.com and Eucalyptus). Makara is not  open source, although the company was committed to open sourcing in due course, and Red Hat is aiming to accelerate that process. Continue reading Red Hat Acquires PaaS Cloud vendor Makara to help compete with VMware’s vFabric