Reason for VSYS

[amansour]

Has anyone found a situation where VSYS is ever truly the best course of action when deploying the firewalls. I have been continually asked about this feature with very little cause to deploy the firewall in this way in most situations.  Can anyone share examples where this could not be avoided or advantages it provides other than segmentation of roles.

Reply still not working?

[Abs]

If you have a third party client that requires access in to your network, you can extend the features of the firewall through VSYS without giving them access to your primary firewall system. This way that can manage policies, run reports, etc.

Not necessary for all, but can be helpful.

A.    

[amansour]

asdf

[jdavis · Accepted solution]

Some service providers who offer a "cloud" firewall service to customers use multiple virtual systems (vsys).  This allows them to assign specific customer traffic to a particular vsys providing the separation that "Abs" spoke of in the others replies.  This allows their customer to have some administrative control of the firewall without stepping on other customers.  I've also seen what he has mentioned with enterprise customers also.

[sraghunandan]

Here's a discussion link which talks about it:-

[jdavis]

Some service providers who offer a "cloud" firewall service to customers use multiple virtual systems (vsys).  This allows them to assign specific customer traffic to a particular vsys providing the separation that "Abs" spoke of in the others replies.  This allows their customer to have some administrative control of the firewall without stepping on other customers.  I've also seen what he has mentioned with enterprise customers also.

[mikand]

Great link indeed 😉

I was about to write an reply when I saw your link 🙂