There are many ways to use virtual systems in a network.
One common use case is for an ISP or a managed security service
provider (MSSP) to deliver services to multiple customers with a
single firewall. Customers can choose from a wide array of services
that can be enabled or disabled easily. The firewall’s role-based
administration allows the ISP or MSSP to control each customer’s
access to functionality (such as logging and reporting) while hiding
or offering read-only capabilities for other functions.
Another common use case is within a large enterprise that requires
different firewall instances because of different technical or confidentiality
requirements among multiple departments. Like the above case, different
groups can have different levels of access while IT manages the
firewall itself. Services can be tracked and/or billed back to departments
to thereby make separate financial accountability possible within