VMware ESXi, Microsoft Hyper-V, Citrix XenServer, and Oracle VirtualBox. It's an on-premises virtual appliance, so it doesn't currently deploy on AWS, Azure, or other cloud hypervisors.

No, SSL inspection isn't included at this tier, matching the physical 310. It still filters HTTPS destinations by domain and category. The Vx410 is the virtual model where full SSL inspection becomes standard.

User capacity is the same, up to 400 concurrent users, but the Vx310's throughput tops out lower than the physical unit since it's sharing host resources rather than running on dedicated hardware. It also has no Ethernet bridge, deploying instead through your hypervisor's virtual network.

Yes, it's sold as a renewable subscription tied to the number of CPU cores allocated to it rather than a one-time hardware purchase, which keeps upfront cost lower if you already have virtualization infrastructure in place.

Plan on 2 CPU cores, roughly 4 to 8 GB of RAM, and about 200 GB of direct-attached disk space. Network-attached storage isn't supported, so the disk needs to be local to the host.