An ISP that has multiple customers on a firewall (known
as multi-tenancy) can use a virtual system for each customer, and
thereby give each customer control over its virtual system configuration.
The ISP grants
vsysadmin
permission to customers.
Each customer’s traffic and management are isolated from the others. Each
virtual system must be configured with its own IP address and one
or more virtual routers in order to manage traffic and its own connection
to the Internet.