NGFW

2.2 Gbps

Next-Generation Intrusion Prevention System (NGIPS)

2.2 Gbps

Interfaces

8 x RJ45, 4 x SFP

Form factor (rack units)

1RU

Dimensions (H x W x D)

1.72 x 17.2 x 10.58 in.

Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)

650 Mbps

1.5 Gbps

2.2 Gbps

Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)

650 Mbps

1.5 Gbps

2.2 Gbps

Maximum concurrent sessions, with AVC

100K

200K

400K

Maximum new connections per second, with AVC

6K

15K

22K

Transport Layer Security (TLS)

150 Mbps

700 Mbps

1 Gbps

Throughput: NGIPS (1024B)

650 Mbps

1.5 Gbps

2.2 Gbps

IPSec VPN throughput (1024B TCP w/Fastpath)

300 Mbps

1 Gbps

1.2 Gbps

Maximum VPN Peers

75

150

400

Cisco Firepower Device Manager (local management)

Yes

Yes

Yes

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator

AVC

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open-source application detectors

Standard

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco Firepower NGIPS

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Advanced Malware Protection (AMP) for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally available.

Cisco AMP Threat Grid sandboxing

Available

URL filtering: number of categories

More than 80

URL filtering: number of URLs categorized

More than 280 million

Automated threat feed and IPS signature updates

Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos® group

Third-party and open-source ecosystem

Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats

High availability and clustering

Active/standby

Cisco Trust Anchor Technologies

Cisco Firepower 1000 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details.

NOTE: Performance will vary depending on features activated, and network traffic protocol mix, and packet size characteristics. Performance is subject to change with new software releases. Consult your Cisco representative for detailed sizing guidance.

FPR1010-NGFW-K9

650 Mbps

650 Mbps

8 x RJ45

FPR1120-NGFW-K9

1.5 Gbps

1.5 Gbps

8 x RJ45, 4 x SFP

FPR1140-NGFW-K9

2.2 Gbps

2.2 Gbps

8 x RJ45, 4 x SFP