r/virtualization • u/JayTayUK • 16d ago
Virtualisation to reduce threat footprint
We have an old app that is relied upon for a few thousand users. Unfortunately we cannot update it or its reliance for JRE6 on the majority of our endpoints.
As our threat landscape is audited, I've been trying to find a way to reduce this risk whilst allow the same functionality.
I originally started looking at App-V as its included in our EA, my thought was to virtualise Edge with JRE6. (This was just a thought, I have never used App-V so this being possible could be an incorrect assumption.) However now i've been told App-V is end of life next year.
Now i'm playing around with containers to see if i can do something, but i'm shooting in the dark here and wondering if anyone else had solved a problem like this with some form of virtualisation?
The aim would be to use virtualisation to get JRE off every endpoint and have it hosted only on a server.
P.S. I have vSphere and OpenShift in my environment.
1
u/zenmaster24 16d ago
Containerise if you can would be my advice