The embodiment of the invention discloses a virtualization security isolation method and device, and relates to the technical field of communication. The virtualization security isolation method and device can avoid the problem that security policies need to be reconfigured due to redistribution of security groups under the premise of guaranteeing the security of all virtual machines, save a great amount of time and energy of technical maintenance personnel, and reduce maintenance cost. The method comprises the steps of dividing at least two virtual machines into a policy group, adding the security policies matched with the virtual machine to be updated and obtaining the security policies of the updated policy group on the basis of the security policies of the policy group, updating the virtual machine to be updated to the policy group, and issuing the security policies of the updated policy group when the policy group is started. The virtualization security isolation method and device are suitable for scenes of carrying out security isolation on the virtual machines.