Cisco Firepower 9300: Ultra-high-performance NGFW, expandable as your needs grow

Danh mục: CISCO, Firewall, Thiết bị mạng CISCO - HP - ATi

Mô tả
Đánh giá (0)

Performance Highlights

Table 1 summarizes the performance highlights of the Cisco Firepower NGFW 4100 Series and 9300 appliances and select ASA-FTD-5500-X appliances.

Table 1. Performance Highlights

Cisco Firepower Model

Cisco ASA 5500-FTD-X Model

Features

4110

4120

4140

4150¹

9300 with 1 SM-24 Module

9300 with 1 SM-36 Module

9300 with 3 SM-36 Modules

5506-FTD-X

5506W-FTD-X

5506H-FTD-X

5508-FTD-X

5516-FTD-X

5525-FTD-X

5545-FTD-X

5555-FTD-X

Firewall throughput (ASA)

20 Gbps

40 Gbps

60 Gbps

–

75 Gbps

80 Gbps

225 Gbps

750 Mbps

1 Gbps

1.8 Gbps

2 Gbps

3 Gbps

4 Gbps

Throughput FW + AVC (Firepower Threat Defense)²

12 Gbps

20 Gbps

25 Gbps

–

25 Gbps

35 Gbps

100 Gbps

250 Mbps

450 Mbps

850 Mbps

1,100 Mbps

1,500 Mbps

1,750 Mbps

Throughput: FW + AVC + NGIPS (Firepower Threat Defense)²

10 Gbps

15 Gbps

20 Gbps

–

20 Gbps

30 Gbps

90 Gbps

125 Mbps

250 Mbps

450 Mbps

650 Mbps

1,000 Mbps

1,250 Mbps

Platform Support

Cisco Firepower 4100 Series and Firepower 9300 NGFW appliances use the Cisco Firepower Threat Defense software image. Alternatively, these appliances can support the Cisco Adaptive Security Appliance (ASA) software image. The Cisco Firepower Management Center (formerly FireSIGHT) provides unified management of the Cisco Firepower NGFW, as well as Cisco Firepower NGIPS and Cisco AMP. Also available, on select Cisco Firepower appliances, and direct from Cisco, is the Radware DefensePro distributed denial of service (DDoS) mitigation capability.

Cisco Firepower 4100 Series Appliances

The Cisco Firepower 4100 Series is a family of four threat-focused NGFW security platforms. Their maximum throughput ranges from 20 to more than 60 Gbps, addressing use cases from the Internet edge to the data center. They deliver superior threat defense, at faster speeds, with a smaller footprint.

Cisco Firepower 9300 Appliance

The Cisco Firepower 9300 is a scalable (beyond 1Tbps), carrier-grade, modular platform designed for service providers, high-performance computing centers, data centers, campuses, high-frequency trading environments, and more that require low (less than 5-microsecond offload) latency and exceptional throughput. Cisco Firepower 9300 supports flow-offloading, programmatic orchestration, and management of security services with RESTful APIs. It is also available in NEBS-compliant configurations.

Cisco ASA 5500-FTD-X Series Appliances

The Cisco ASA 5500-FTD-X Series is a family of eight threat-focused NGFW security platforms. Their maximum throughput ranges from 750 Mbps to 4 Gbps, addressing use cases from the small or branch office to the Internet edge. They deliver superior threat defense in a cost-effective footprint.

Performance Specifications and Feature Highlights

Table 2 summarizes the capabilities of the Cisco Firepower NGFW 4100 Series and 9300 appliances and the Cisco ASA 5500-FTD-X appliances when running the Cisco Firepower Threat Defense image.

Table 2. Performance Specifications and Feature Highlights with the Firepower Threat Defense Image

Cisco Firepower Model								Cisco ASA 5500-FTD-X Model
Features	4110	4120	4140	4150¹	9300 with 1 SM‑24 Module	9300 with 1 SM‑36 Module	9300 with 3 Clustered SM‑36 Modules	5506-FTD-X	5506W-FTD-X	5506H-FTD-X	5508-FTD-X	5516-FTD-X	5525-FTD-X	5545-FTD-X	5555-FTD-X
Throughput: FW + AVC²	12 Gbps	20 Gbps	25 Gbps	–	25 Gbps	35 Gbps	100 Gbps	250 Mbps	250 Mbps	250 Mbps	450 Mbps	850 Mbps	1,100 Mbps	1,500 Mbps	1,750 Mbps
Throughput: AVC + IPS²	10 Gbps	15 Gbps	20 Gbps	–	20 Gbps	30 Gbps	90 Gbps	125 Mbps	125 Mbps	125 Mbps	250 Mbps	450 Mbps	650 Mbps	1,000 Mbps	1,250 Mbps
Sizing throughput (450-byte HTTP)³: AVC or IPS	4 Gbps	8 Gbps	10 Gbps	–	9 Gbps	12.5 Gbps	30 Gbps
Sizing throughput (440-byte HTTP)³: AVC or IPS								90 Mbps	90 Mbps	90 Mbps	180 Mbps	300 Mbps	375 Mbps	575 Mbps	725 Mbps
Maximum concurrent sessions, with AVC	4.5 million	11 million	14 million	–	28 million	29 million	57 million	50000	50000	50000	100,000	250,000	500,000	750,000	1,000,000
Maximum new connections per second, with AVC	68,000	120,000	160,000	–	120,000	160,000	500,000	5,000	5,000	5,000	10,000	20,000	20,000	30,000	50,000
Application Visibility and Control (AVC)	Standard, supporting more than 4000 applications, as well as geo-locations, users, and websites
AVC: OpenAppID support for custom, open source, application detectors	Standard
Cisco Security Intelligence	Standard, with IP, URL, and DNS threat intelligence
Cisco Firepower NGIPS	Available; can passively detect endpoints and infrastructure for threat correlation and indicators of compromise (IoC) intelligence
Cisco AMP for Networks	Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally available
Cisco AMP Threat Grid sandboxing	Available
URL Filtering: categories	More than 80+
URL Filtering: URLs categorized	More than 280 million
Automated threat feed and IPS signature updates	Yes: class-leading Collective Security Intelligence (CSI) from Cisco Talos (http://www.cisco.com/c/en/us/products/security/talos.html)
Third-party and open-source ecosystem	Open API for integrations with third-party products; Snort^® and OpenAppID community resources for new and specific threats
Centralized management	Centralized configuration, logging, monitoring, and reporting is performed by the Firepower Management Center
High availability and clustering	Active/standby; with Cisco Firepower 9300 intra-chassis clustering is also supported
VLANs – Maximum	1024

Table 3 summarizes the performance and capabilities of the Cisco Firepower 4100 Series and 9300 appliances when running the ASA image. For Cisco ASA 5500-X series ASA performance specifications please visit the
Cisco ASA with FirePOWER Services data sheet.

Table 3. ASA Performance and Capabilities

Cisco Firepower Model
Features	4110	4120	4140	4150¹	9300 with 1 SM‑24 Module	9300 with 1 SM‑36 Module	9300 with 3 SM‑36 Modules
Stateful inspection firewall throughput²	20 Gbps	40 Gbps	60 Gbps	–	75 Gbps	80 Gbps	225 Gbps
Stateful inspection firewall throughput (multiprotocol)³	10 Gbps	20 Gbps	30 Gbps	–	50 Gbps	60 Gbps	130 Gbps
Concurrent firewall connections	10 million	15 million	25 million	–	55 million	60 million	70 million
Firewall latency (UDP 64b, microseconds)	3.5	3.5	3.5	–	3.5	3.5	3.5
New connections per second	150,000	250,000	350,000	–	600,000	900,000	2.5 million
Security contexts⁴	250	250	250	–	250	250	250
Virtual interfaces	1024	1024	1024	–	1024	1024	1024
IPSEC VPN throughput	8 Gbps	10 Gbps	14 Gbps	–	15 Gbps	18 Gbps	54 Gbps⁵
IPsec/Cisco AnyConnect/Apex site-to-site VPN peers	10,000	15,000	20,000	–	20,000	20,000	60,000⁵
Maximum number of VLANs	1024	1024	1024	–	1024	1024	1024
Security contexts (included; maximum)	10; 250	10; 250	10; 250	–	10; 250	10; 250	10; 250
High availability	Active/active and active/standby	Active/active and active/standby	Active/active and active/standby	–	Active/active and active/standby	Active/active and active/standby	Active/active and active/standby
Clustering	Up to 15 appliances	Up to 15 appliances	Up to 15 appliances	–	Up to 5 appliances with 3 security modules each	Up to 5 appliances with three security modules each	Up to 5 appliances with 3 security modules each
Scalability	VPN clustering and load balancing, interchassis clustering	VPN clustering and load balancing, interchassis clustering	VPN clustering and load balancing, interchassis clustering	–	VPN clustering and load balancing, intrachassis clustering, interchassis clustering	VPN clustering and load balancing, intrachassis clustering, interchassis clustering	VPN clustering and load balancing, intrachassis clustering, interchassis clustering

Đánh giá

Chưa có đánh giá nào.

Hãy là người đầu tiên nhận xét “Cisco Firepower 9300: Ultra-high-performance NGFW, expandable as your needs grow”

Website này sử dụng Akismet để hạn chế spam. Tìm hiểu bình luận của bạn được duyệt như thế nào.

Categories

Cisco Firepower 9300: Ultra-high-performance NGFW, expandable as your needs grow

Đánh giá

Related Products