By default, routing between VSs is handled internally using a Virtual Router, which forwards traffic at Layer 3, allowing isolated VSs to communicate when required.

cpinfo -o creates a full system diagnostic archive, including VSX configuration, logs, and state. It is the standard command recommended by TAC for submitting support cases.

Logs from individual VSs are sent to the Security Management Server and are accessible via SmartView Tracker or the Logs tab in SmartConsole, offering centralized event visibility.

The vsenv command allows administrators to switch into the context of a specific Virtual System.
This is necessary for running diagnostic commands like tcpdump, fw ctl, and route checks inside the VS.

VLAN tagging enables multiple Virtual Systems to share the same physical interface while maintaining logical separation. Each VS gets a different VLAN ID mapped to its interfaces, allowing traffic segregation and efficient port usage.