SM-40

80G

55G

60G

8 x SFP+ on-chassis

2 x NMs: 1/10/40/100G, FTW

SM-48

80G

65G

68G

8 x SFP+ on-chassis

2 x NMs: 1/10/40/100G, FTW

SM-56

80G

68G

73G

8 x SFP+ on-chassis

2 x NMs: 1/10/40/100G, FTW

SM-56 x 3

235G

190G

190G

8 x SFP+ on-chassis

2 x NMs: 1/10/40/100G, FTW

Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)

55 Gbps

65 Gbps

70 Gbps

190 Gbps

Throughput: FW + AVC + Intrusion Prevention

System (IPS (1024B)

55 Gbps

65 Gbps

68 Gbps

190 Gbps

Maximum concurrent sessions, with AVC

35 million

35 million

35 million

60 million

Maximum new connections per second, with AVC

380K

450K

490K

1.1M

TLS (Hardware Decryption)2

10 Gbps

11 Gbps

12 Gbps

28 Gbps

Throughput: NGIPS (1024B)

60 Gbps

68 Gbps

73 Gbps

190 Gbps

IPSec VPN throughput

(1024B TCP /Fastpath)

27 Gbps

33 Gbps

36 Gbps

110 Gbps1

Maximum VPN Peers

20,000

20,000

20,000

60,000

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator

AVC

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open-source application detectors

Standard

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco IPS License

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Malware Defense for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available

Cisco Malware Analytics
(sandboxing)

Available

URL filtering: number of categories

More than 120

URL filtering: number of URLs categorized

More than 280 million

Automated threat feed and IPS signature updates

Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos® group (https://www.cisco.com/c/en/us/products/security/talos.html)

Third-party and open- source ecosystem

Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats

High availability and clustering

Active/active (with clustering) and Active/standby; up to 6 modules across up to 6 different Firepower 9300 chassis.

Cisco Trust Anchor Technologies

Cisco Firepower 9300 Series platforms include Trust Anchor Technologies for supply chain and software image assurance.

Stateful inspection firewall throughput1

80 Gbps

80 Gbps

80 Gbps

235 Gbps

Stateful inspection firewall throughput (multiprotocol)2

55 Gbps

60 Gbps

64 Gbps

172 Gbps

Concurrent firewall connections

55 million

60 million

60million

195 million

Firewall latency
(UDP 64B microseconds)

3.5

3.5

3.5

3.5

New connections per second

1.6 million

1.8 million

2 million

4.75 million

IPsec VPN throughput
(450B UDP L2L test)

25 Gbps

27 Gbps

30 Gbps

74 Gbps

Maximum VPN Peers

20,000

20,000

20,000

60,000

Security contexts (included; maximum)

10; 250

High availability

Active/active and active/standby

Clustering

Up to 16 security modules across up to 16 different Firepower 9300 chassis

Scalability

VPN load balancing, firewall clustering

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator

Adaptive Security Device Manager

Web-based, local management for small-scale deployments

Dimensions (H x W x D)

5.25 x 17.5 x 32 in. (13.3 x 44.5 x 81.3 cm)

Form factor

3 Rack Units (3RU), fits standard 19-in. (48.3-cm) square-hole rack

Security module slots

3

Network module slots

2 (within supervisor)

Supervisor

Cisco Firepower 9000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 network module slots for I/O expansion

Security modules

Network modules
(2 module slots per chassis)

Note: Cisco Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for details.

Maximum number of interfaces

Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules; up to 8 x 100 Gigabit Ethernet interfaces with two network modules; up to 24 x 1 Gigabit Ethernet ports(SFP) with network modules and fixed ports

Integrated network management ports

1 x Gigabit Ethernet copper port (on supervisor)

Serial port

1 x RJ-45 console

USB

1 x USB 2.0

Storage

Up to 4.8 TB per chassis (1.6 TB per security module in RAID-1 configuration)

Power supplies

AC power supply

-48V DC power supply

HVDC power supply

Input voltage

200 to 240V AC

-40V to -60V DC*

240 to 380V DC

Maximum input current

15.5A to 12.9A

69A to 42A

<14A at 200V

Maximum output power

2,500W

2,500W

2,500W

Frequency

50 to 60 Hz

-

-

Efficiency (at 50% load)

92%

92%

92% (at 50% load)

Redundancy

1+1

Fans

4 hot-swappable fans

Noise

75.5 dBA at maximum fan speed

Rack mountable

Yes, mount rails included (4-post EIA-310-D rack)

Weight

105 lb (47.7 kg) with one security module; 135 lb (61.2 kg) fully configured

Temperature: standard operating

Up to 10,000 ft (3000 M): 32 to 104°F (0 to 40°C) for SM-40 module 32 to 104°F (0 to 40°C) for SM-48 module at sea level

Altitude adjustment notes:

For SM-56, maximum temp is 35°C, for every 1000 feet above sea level subtract 1°C

Temperature: NEBS operating

Long term: 0 to 45°C, up to 6,000 ft (1829 m) Long term: 0 to 35°C, 6,000 to 13,000 ft (1829-3964 m) Short term: -5 to 55°C, up to 6,000 ft (1829 m)

Note: Firepower 9300 NEBS compliance applies only to SM-40 and SM-48 configurations.

Temperature: nonoperating

-40 to 149°F (-40 to 65°C); maximum altitude is 40,000 ft

Humidity: operating

5 to 95% noncondensing

Humidity: nonoperating

5 to 95% noncondensing

Altitude: operating

SM-40, SM-48: 0 to 13,000 ft (3962 m)

SM-56: 0 to 10,000 ft (3048 m); please see above Operating Temperature section for temperature adjustment notes

Altitude: nonoperating

40,000 ft (12,192 m)

NEBS

Cisco Firepower 9300 is NEBS compliant with SM-40 and SM-48 Security Modules

Regulatory compliance

Products comply with CE markings per directives 2004/108/EC and 2006/108/EC

Safety

EMC: emissions

EMC: immunity