Palo Alto Networks PAN-PA-3420-VSYS-10 software license/upgrade 1 license(s)

Virtual systems are separate, logical firewall instances within a single physical Palo Alto Networks firewall. Rather than using multiple firewalls, managed service providers and enterprises can use a single pair of firewalls (for high availability) and enable virtual systems on them. Each virtual system (vsys) is an independent, separately-managed firewall with its traffic kept separate from the traffic of other virtual systems.

There are many ways to use virtual systems in a network. One common use case is for an ISP or a managed security service provider (MSSP) to deliver services to multiple customers with a single firewall. Customers can choose from a wide array of services that can be enabled or disabled easily. The firewall’s role-based administration allows the ISP or MSSP to control each customer’s access to functionality (such as logging and reporting) while hiding or offering read-only capabilities for other functions.