Reflex's solution, combined with VMware's software, has been very easy and very quick to install. Olan Mills is confident that the security solution effectively addresses any possible PCI concerns about the security of several virtual servers on one physical device. I'm confident that if we called for an audit today, we would pass with flying colors. Galen Smith, IT Systems Administrator at Olan Mills Portrait Studios.
Compliance
Reflex VMC (Virtualization Management Center) provides the required virtualization management and enforcement features and functions to meet compliance regulations and independent verification for Payment Card Industry (PCI), Sarbanes-Oxley (SOX), Health Insurance Portability and Accountability Act (HIPAA), and Gramm-Leach-Bliley Act (GLBA). Reflex VMC is purpose-built and designed to meet unique virtualization management and security challenges surrounding compliance such as monitoring the dynamic environment, maintaining secure configuration, cross-functional administration and threat mitigation. Physical security devices residing outside the virtual infrastructure may provide basic levels of monitoring and security, but they do not provide the granular visibility and control within the virtual infrastructure needed to address these challenges.
Payment Card Industry (PCI) Compliance
Reflex enables enterprises to successfully certify their virtualized PCI infrastructure by:
- Building and maintaining a secure virtual network
- Maintaining a vulnerability management program
- Implementing strong access control measures
- Regularly monitoring and testing networks
- Maintaining an information security policy
Additionally, Reflex VMC is able to take advantage of virtualization as a trusted computing platform to enable customers to adopt and deploy "defense in depth" best practices without the traditional high costs and complexities of physical infrastructure.
Through a holistic view and approach to virtualization, that includes products purpose-built and optimized for virtualized environments, organizations using Reflex VMC are able to not only maintain their PCI compliance but also improve their overall data security through the virtualized data center.
PCI Resources
- Olan Mills Case Study
- PCI Compliance with Reflex VMC
- Virtualization Security & PCI Compliance Article
