Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Whether configuring Vsys will make firewall more secure or not

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Whether configuring Vsys will make firewall more secure or not

L2 Linker

I would like to know advantage and disadvantage of implementing Vsys. 

in an environment , we are able to configure our firewalls with vsys or without vsys. 

Would also like to know whether configuring vsys will make firewall more secure or not ?

 

 

1 REPLY 1

L4 Transporter

Hello @perumalj 

 

Good evening, it all depends on the use.

 

Example if you have a firewall or a HA of a pair of PA 52XX series, you have the possibility to use virtual systems. That allows you virtual system, to be able to segment a Firewall in several, example:

Thinking about a company, an enterprise, or a Holding company and you want each of the companies to have its own virtual firewall inside a physical hardware, is where in this use case ( there are more ) can make sense:

 

Example:

Company 1: Will have the VSYS1 and will occupy the first 4 interfaces of the Dataplante.
Company 2: Will have VSYS2 and occupy 2 interfaces (smaller network).
Company 3: Will have VSYS3 and will occupy other 4 interfaces.

 

And so, you can segment the administration, changes, policies, among others.

 

Here are some docs with details and use cases:

 

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/virtual-systems-overview/...

 

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/virtual-systems-overview/...

 

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/virtual-systems-overview/...

 

Support Platform Firewalls:

 

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/virtual-systems/virtual-systems-overview/p...


Best regards

High Sticker
  • 1154 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!