In our case, both internal and external(DMZ) VMs share the same volumes or data stores within NetApp. Those volumes are setup with different replication schedules and for ease of management, some volumes are being shared with VMs from different trust zones. I am concerned with the security risk associated with shareing volumes. With appropriate controls, sharing same storage appliance is acceptable, but I concerned with sharing a volume. I need some support to validate my point. Is there a specific best practice document to address this?
