Adding Virtual Systems (VSYS) to production PA-3020

[jsafranek]

I have run out of Zones on my PA-3020 and can't justify purchasing a 5020 so I am exploring the addition of VSYS license on the 3020.

What am I going to be getting myself into if I need to go this route and add the VSYS licensing? Will it break my existiing config, require a migration of some sort or require a major reconfiguration of everything?

Thanks

[reaper · Accepted solution]

the maximum number of zones is a system wide limit. Adding a vsys would mean you'd need to share your zones between them

Adding a vsys is straight forward, as it simply adds the capability to create additional vsys, but will not touch the default vsys (every system is 'vsys1' by default), but this will not solve you zone issue

[BPry]

@jsafranek,

Just wanted to point out, to make sure you are aware, that if you are pricing a 5020 you would likely have an easier time getting pricing on the 5220. The 5220 is cheaper than the 5020 with better performance. That may make it slightly easier to help justify the increase, as at this point it sounds like you've surpassed the ability of your PA-3020.