"Network firewalls located external to physical servers that support multiple virtual servers cannot filter traffic between virtual servers, according to the report Limited Choices Are Available for Network Firewalls in Virtualized Servers. This means  applications on the virtual servers can communicate undetected with other virtual servers, perhaps in violation of security policies."