11-04-2022 09:50 PM
I would like to know advantage and disadvantage of implementing Vsys.
in an environment , we are able to configure our firewalls with vsys or without vsys.
Would also like to know whether configuring vsys will make firewall more secure or not ?
11-04-2022 10:54 PM - edited 11-04-2022 11:01 PM
Hello @perumalj
Good evening, it all depends on the use.
Example if you have a firewall or a HA of a pair of PA 52XX series, you have the possibility to use virtual systems. That allows you virtual system, to be able to segment a Firewall in several, example:
Thinking about a company, an enterprise, or a Holding company and you want each of the companies to have its own virtual firewall inside a physical hardware, is where in this use case ( there are more ) can make sense:
Example:
Company 1: Will have the VSYS1 and will occupy the first 4 interfaces of the Dataplante.
Company 2: Will have VSYS2 and occupy 2 interfaces (smaller network).
Company 3: Will have VSYS3 and will occupy other 4 interfaces.
And so, you can segment the administration, changes, policies, among others.
Here are some docs with details and use cases:
Support Platform Firewalls:
Best regards
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
