So let's say we have a production site that requires VPN access to the datacenter. We also have a dev/qa datacenter in a separate datacenter with it's own VPN connection. When we're sitting in the office we have an IPSEC tunnel to the dev/qa datacenter, but we have to connect via VPN into production. So, if we're in the office life is good, I can connect to a dev machine or a prod machine BUT I cannot jump from prod to dev and vice versa.
Everything was fine but just recently the network guys got rid of the route that allowed us to use one VPN in order to connect to prod and dev (can't hop between datacenters). We were told it would be a PCI violation, I'm just looking for clarification on whether this is true or not. When we're working from home, it's such a hassle to have to connect and disconnect between the two VPN.
More info (clarification):
- When on a dev machine, I should NOT be able to connect to a prod machine and vice versa.
- When I'm sitting in the office, I can freely connect to a dev machine from my laptop but in order to connect to a prod machine (from my laptop), I have to connect via VPN. I CANNOT jump between datacenters from host to host.
- At one point, when we're working from home, we could connect to the prod VPN and connect to both the prod and dev datacenters BUT we cannot jump between datacenters via a local host in the DC.