On 9/21/07, Kent Watsen  wrote:

quoted text
>

> Some commercial firewalls (i.e. Juniper/NetScreen ScreenOS-based gear)

> have been offering virtual-systems for years now.  I think the negative

> comments received here may be appropriate when sharing the system with

> non-secure guest OSs, but it seems that it might be alright if its

> nothing but firewalls

I have no detailed knowledge of those devices, but I'm pretty sure their

virtual

firewalls are not accomplished by virtualizing the OS, but by supporting

multiple routing tables and rules-sets.
Virtual and virtual may be different in reality.
/Tony