Whether configuring Vsys will make firewall more secure or not

perumalj — Sat, 05 Nov 2022 04:50:06 GMT

I would like to know advantage and disadvantage of implementing Vsys.

in an environment , we are able to configure our firewalls with vsys or without vsys.

Would also like to know whether configuring vsys will make firewall more secure or not ?

Re: Whether configuring Vsys will make firewall more secure or not

Metgatz — Sat, 05 Nov 2022 06:01:15 GMT

Good evening, it all depends on the use.

Example if you have a firewall or a HA of a pair of PA 52XX series, you have the possibility to use virtual systems. That allows you virtual system, to be able to segment a Firewall in several, example:

Thinking about a company, an enterprise, or a Holding company and you want each of the companies to have its own virtual firewall inside a physical hardware, is where in this use case ( there are more ) can make sense:

Example:

Company 1: Will have the VSYS1 and will occupy the first 4 interfaces of the Dataplante.
Company 2: Will have VSYS2 and occupy 2 interfaces (smaller network).
Company 3: Will have VSYS3 and will occupy other 4 interfaces.

And so, you can segment the administration, changes, policies, among others.

Here are some docs with details and use cases:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/virtual-systems-overview/benefits-of-virtual-systems

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/virtual-systems-overview/use-cases-for-virtual-systems

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/virtual-systems-overview/virtual-system-components-and-segmentation

Support Platform Firewalls:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/virtual-systems/virtual-systems-overview/platform-support-and-licensing-for-virtual-systems

Best regards

topic Re: Whether configuring Vsys will make firewall more secure or not in Next-Generation Firewall Discussions

Whether configuring Vsys will make firewall more secure or not

Re: Whether configuring Vsys will make firewall more secure or not