VM-200

VM-100

VM-300

VM-50

Virtual systems

HA active/active

Policy-based forwarding

HA active/passive

T hey allow you to create a policy that automatically adapts to changes — adds, moves,

or deletions of servers.

They enable the flexibility to apply different rules to th e same server based on tags

that define its role on the network, the operating system, or the different kinds of traffic it processes.

A dynamic address group uses tags as a filtering criterion to determine its members.

The filtering criteria uses logical and , or , and not operators.

100 milliseconds

1000 milliseconds

2 seconds

5 seconds

The second VM - Series firewall should be in a different host and the HA3 connection should be over a dedicated high - speed link .

The second VM - Series firewall should be in the same virtual machine so the HA3 connection does not have to travel over a physical connection .

The HA3 connection should traverse no more than a single virtual switch.

There is no HA3 connection on a VM - Series firewall.

Recommended

Custom

Aggressive

Low - latency

Advanced

It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.

It can bootstrap the virtual firewall for dynamic deployment scenarios

It can manage the virtual firewalls’ resource use, allowing for VM resource over-subscription.

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support