Professional Documents
Culture Documents
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 24
Contents
Model Overview 3
Platform Image Support 4
Management Options 4
Firepower DDoS Mitigation 4
Performance Testing Methodologies 5
Performance Specifications and Feature Highlights 6
Hardware Specifications 10
Cisco Trust Anchor Technologies 17
Firepower DDoS Mitigation 17
Ordering Information 19
Warranty Information 23
Cisco Services 23
Cisco Capital 23
Document History 24
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 24
The Cisco Firepower® NGFW (next-generation firewall) is the industry’s first fully integrated, threat-
focused next-gen firewall with unified management. It uniquely provides advanced threat protection
before, during, and after attacks.
Contain known and unknown malware with leading Cisco® Advanced Malware Protection (AMP) and
sandboxing.
Stop more threats
Gain superior visibility into your environment with Cisco Firepower next-gen IPS.
Automated risk rankings and impact flags identify priorities for your team.
Gain more insight
The Cisco Annual Security Report identifies a 100-day median time from infection to detection, across
enterprises. Reduce this time to less than a day.
Get unified management and automated threat correlation across tightly integrated security functions,
including application firewalling, NGIPS, and AMP.
Reduce complexity
Enhance security, and take advantage of your existing investments, with optional integration of other
Cisco and third-party networking and security solutions.
Get more from your network
Model Overview
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 24
Cisco ASA 5500-X Series:
Models for branch offices, industrial applications, and the Internet edge
Firepower NGFWv:
The NGFW for virtual and cloud environments
Management Options
Cisco Firepower NGFWs may be managed in a variety of ways depending on the way you work, your environment, and
your needs.
The Cisco Firepower Management Center provides centralized management of the Cisco Firepower NGFW, the Cisco
Firepower NGIPS, and Cisco AMP for Networks. It also provides threat correlation for network sensors and Advanced
Malware Protection (AMP) for Endpoints.
The Cisco Firepower Device Manager is available for local management of 2100 Series and select 5500-X Series devices
running the Cisco Firepower Threat Defense software image.
The Cisco Adaptive Security Device Manager is available for local management of the Cisco Firepower 2100 Series, 4100
Series, Cisco Firepower 9300 Series, and Cisco ASA 5500-X Series devices running the ASA software image.
Cisco Defense Orchestrator cloud-based management is also available for consistent policy management across Cisco
security devices running the ASA software image, enabling greater management efficiency for the distributed enterprise.
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 24
Cisco Firepower 2100 Series Appliances
The Cisco Firepower 2100 Series is a family of four threat-focused NGFW security platforms that deliver business
resiliency through superior threat defense. It offers exceptional sustained performance when advanced threat functions
are enabled. These platforms uniquely incorporate an innovative dual multicore CPU architecture that optimizes firewall,
cryptographic, and threat inspection functions simultaneously. The series’ firewall throughput range addresses use cases
from the Internet edge to the data center. Network Equipment Building Standards (NEBS)- compliance is supported by
the Cisco Firepower 2100 Series platform.
Two modes of firewall testing exist: static or real world. Static testing leverages performance and security testing tools in
a simulated environment. Real-world testing uses samples of live traffic on a production or side-car network. While static
testing does not completely mimic performance in a real-world networking environment, we review and modify the static
methodology to ensure the results are as close to real-world as possible.
The following are test methodologies used for measurements listed in Table 1. Small packet size tests will reflect
additional inspection overhead thus results in reduced firewall throughput. The reduction is not linear, so extrapolation
from a single test is not possible for the almost unlimited variety of network environments. Testing security efficacy or
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 24
security service performance under loaded conditions adds even more complexity. For these reasons we rely on the 1024B
HTTP Test.
1500B UDP
This test uses a transactional UDP profile with 1500-byte frames. Due to the stateless nature of UDP, it creates very little
impact on a stateful NGFW. Many vendors use this profile to measure maximum firewall performance, but it is only
practical as a comparison point and does not represent world conditions.
TLS
This test follows the 1024B HTTP test conditions with 50% of sessions encapsulated into TLS (HTTPS) and fully decrypted
for inspection in hardware. Client TLS sessions use AES256-SHA cipher with 2048-bit RSA keys, and the server is assumed
to reside behind the NGFW for Known Key decryption. These test results can be linearly extrapolated for other
percentages of TLS traffic; for example, the NGFW throughput will be approximately twice as high with 25% of HTTPS
connections in the overall traffic mix.
Table 1. Performance Specifications and Feature Highlights for Physical and Virtual Appliances with the Cisco Firepower Threat Defense
Image
5506W-FTD-X
5506H-FTD-X
5506-FTD-X
5508-FTD-X
5516-FTD-X
5525-FTD-X
5545-FTD-X
5555-FTD-X
Modules
NGFWv
Module
Module
Module
2110
2120
2130
2140
4110
4120
4140
4150
Throughput: FW + 1.2 2.0 3 Gbps 4.75 8.5 12 Gbps 20 25 Gbps 30 Gbps 25 Gbps 35 Gbps 50 Gbps 118 250 250 250 450 850 1100 1500 1750
AVC 1024B Gbps Gbps Gbps Gbps Gbps Gbps Mbps Mbps Mbps Mbps Mbps Mbps Mbps Mbps
Throughput: FW + 1.1 2.0 3 Gbps 4.75 8.5 10 Gbps 15 Gbps 20 24 20 30 Gbps 45 Gbps 117 125 125 125 250 450 650 1000 1250
AVC + IPS (1024B) Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Mbps Mbps Mbps Mbps Mbps Mbps Mbps Mbps
Maximum 100,000 1 1.2 2 3.0 9 15 25 30 30 30 30 60 20,000 20,000 20,000 100,000 250,000 500,000 750,000 1,000,0
concurrent million million million million million million million million million million million million 00
sessions, with
AVC
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 24
Features Cisco Firepower Model Cisco ASA 5500-FTD-X Model
5506W-FTD-X
5506H-FTD-X
5506-FTD-X
5508-FTD-X
5516-FTD-X
5525-FTD-X
5545-FTD-X
5555-FTD-X
Modules
NGFWv
Module
Module
Module
2110
2120
2130
2140
4110
4120
4140
4150
Maximum new 10,000 12,000 16,000 24,000 40,000 68,000 120,000 160,000 200,00 120,000 160,000 300,000 900,00 3,000 3,000 3,000 7,000 8,000 10,000 15,000 20,000
connections per 0 0
second, with AVC
TLS (Hardware - 350 450 700 1.2 4.5 7.1 7.3 7.5 7.5 8.5 10 Gbps 25.5 - - - - - - - -
Decryption) Mbps Mbps Mbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps Gbps
IPSec VPN - 750 1 Gbps 1.5 3 Gbps 6 Gbps 10 Gbps 13 Gbps 14 Gbps 13.5 16 Gbps 17 Gbps 51 Gbps 100 100 100 175 250 300 400 700
Throughput Mbps Gbps Gbps Mbps Mbps Mbps Mbps Mbps Mbps Mbps Mbps
(1024B TCP
w/Fastpath)
Maximum VPN - 1500 3500 7500 10000 10000 15000 20000 20000 20000 20000 20000 60000 50 50 50 100 300 300 400 700
Peers
Cisco Firepower Yes Yes Yes Yes Yes - - - - - - - - Yes Yes Yes Yes Yes Yes Yes Yes
Centralized mana Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator
gement
Application Standard, supporting more than 4000 applications, as well as geolocations, users, and websites
Visibility and
Control (AVC)
support for
custom, open
source,
application
detectors
Cisco Security Standard, with IP, URL, and DNS threat intelligence
Intelligence
Cisco Firepower Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
NGIPS
Cisco AMP for Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for
Grid sandboxing
number of
categories
number of URLs
categorized
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 24
Features Cisco Firepower Model Cisco ASA 5500-FTD-X Model
5506W-FTD-X
5506H-FTD-X
5506-FTD-X
5508-FTD-X
5516-FTD-X
5525-FTD-X
5545-FTD-X
5555-FTD-X
Modules
NGFWv
Module
Module
Module
2110
2120
2130
2140
4110
4120
4140
4150
Automated threat Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos Group (https://www.cisco.com/c/en/us/products/security/talos.html)
signature updates
®
Third-party and Open API for integrations with third-party products; Snort and OpenAppID community resources for new and specific threats
open-source
ecosystem
High availability Active/St Active/standby; for Cisco Firepower 9300 intrachassis clustering of up to 5 chassis is allowed; Cisco Firepower 4100 Series allows clustering of up to 6 chassis
for ESXi
and KVM
Cisco Trust - ASA 5506-X, 5508-X, and 5516-X appliances, Firepower 2100 Series and Firepower 4100 Series and 9300 platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the
Note: Throughput assumes HTTP sessions with an average packet size of 1024 bytes. TLS numbers measured with AVC
only policies and 50% TLS traffic with AES256-SHA cipher and RSA 2048-bit keys.
Performance will vary depending on features activated, and network traffic protocol mix, packet size characteristics and
hypervisor employed (NGFWv). Performance is subject to change with new software releases. Consult your Cisco
representative for detailed sizing guidance.
Table 2 summarizes the performance and capabilities of the Cisco Firepower 2100, 4100 Series and 9300 appliances when
running the ASA image. For Cisco ASA 5500-X Series performance specifications with the ASA image, please visit the
Cisco ASA with FirePOWER Services data sheet.
2110 2120 2130 2140 4110 4120 4140 4150 9300 with 9300 with 9300 with 9300 with
1 SM-24 1 SM-36 1 SM-44 3 SM-44
Module Module Module Modules
Stateful 3 Gbps 6 Gbps 10 Gbps 20 Gbps 35 Gbps 60 Gbps 70 Gbps 75 Gbps 75 Gbps 80 Gbps 80 Gbps 234 Gbps
inspection
firewall
1
throughput
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 24
Features Cisco Firepower Appliance Model
2110 2120 2130 2140 4110 4120 4140 4150 9300 with 9300 with 9300 with 9300 with
1 SM-24 1 SM-36 1 SM-44 3 SM-44
Module Module Module Modules
Stateful inspection 1.5 Gbps 3 Gbps 5 Gbps 10 Gbps 15 Gbps 30 Gbps 40 Gbps 50 Gbps 50 Gbps 60 Gbps 60 Gbps 130 Gbps
firewall throughput
2
(multiprotocol)
Concurrent 1 million 1.5 million 2 million 3 million 10 million 15 million 25 million 35 million 55 million 60 million 60 million 70 million
firewall
connections
Firewall latency - - - - 3.5 3.5 3.5 3.5 3.5 3.5 3.5 3.5
(UDP 64B
microseconds)
New connections 18000 28000 40000 75000 150,000 250,000 350,000 800,000 800,000 1.2 million 1.8 million 4 million
per second
3
IPsec VPN 500 Mbps 700 Mbps 1 Gbps 2 Gbps 8 Gbps 10 Gbps 14 Gbps 15 Gbps 15 Gbps 18 Gbps 20 Gbps 60 Gbps /
3
IPsec/Cisco 1500 3500 7500 10000 10,000 15,000 20,000 20,000 20,000 20,000 20,000 60,000 /
AnyConnect/Apex 20,000
site-to-site VPN
peers
Maximum 400 600 750 1024 1024 1024 1024 1024 1024 1024 1024 1024
number of VLANs
Security contexts 2; 25 2; 25 2; 30 2; 40 10; 250 10; 250 10; 250 10; 250 10; 250 10; 250 10; 250 10; 250
(included;
maximum)
High availability Active/acti Active/active Active/active Active/active Active/active Active/active Active/active Active/active Active/active Active/active Active/active Active/active
ve and and and and and and and and and and and and
active/stan active/stand active/stand active/stand active/stand active/stand active/stand active/stand active/stand active/stand active/stand active/stand
dby by by by by by by by by by by by
Clustering - - - - Up to 16 Up to 16 Up to 16 Up to 16 Up to 5 Up to 5 Up to 5 Up to 5
Centralized Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator
management
1
Throughput measured with 1500B User Datagram Protocol (UDP) traffic measured under ideal test conditions.
2
“Multiprotocol” refers to a traffic profile consisting primarily of TCP-based protocols and applications like HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS.
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 9 of 24
3
In unclustered configuration.
Hardware Specifications
Tables 4, 5, and 6 summarize the hardware specifications for the 2100 Series, 4100 Series, and 9300 Series, respectively.
Table 7 summarizes regulatory standards compliance. For Cisco ASA 5500-X Series hardware specifications, please visit
the Cisco ASA with FirePOWER Services data sheet.
Note: The 2100 Series appliances may also be deployed as dedicated threat sensors with
fail-to-wire network modules. Please contact your Cisco representative for details.
Maximum number of interfaces Up to 16 total Ethernet ports Up to 24 total Ethernet ports (12x1G RJ-45,
(12x1G RJ-45, 4x1G SFP) 4x10G SFP+, and network module with
8x10G SFP+)
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 10 of 24
Features Cisco Firepower Model
Storage 1x 100 GB, 1x spare 1x 100 GB, 1x spare 1x 200 GB, 1x 1x 200 GB, 1x spare slot
slot (for MSP) slot (for MSP) spare slot (for MSP)
(for MSP)
Power Configuration Single integrated 250W AC power supply. Single 400W AC, Dual 400W AC.
supplies Dual 400W AC Single/dual 350W DC
optional. optional1
Single/Dual 350W
DC optional1
AC frequency 50 to 60 Hz 50 to 60 Hz
Fans 4 integrated (2 internal, 2 exhaust) fans2 1 hot-swappable fan module (with 4 fans)2
Rack mountable Yes. Fixed mount brackets included Yes. Mount rails included (4-post EIA-310-D
(2-post). Mount rails optional (4-post EIA- rack)
310-D rack)
Weight 16.1 lb (7.3 kg): with 2x SSDs 19.4 lb (8.8 kg) 1 x 21 lb (9.53 kg) 2 x
power supplies, 1 x power supplies, 1 x
NM, 1 x fan module, NM, 1 x fan module,
2x SSDs 2x SSDs
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 11 of 24
Features Cisco Firepower Model
1
Dual power supplies are hot-swappable.
2
Fans operate in a 3+1 redundant configuration where the system will continue to function with only 3 operational fans. The 3 remaining fans will run at
full speed.
3
FPR-2130 platform is designed to be NEBS ready. The availability of NEBS certification is pending.
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 12 of 24
Table 5. Cisco Firepower 4100 Series Hardware Specifications
Supervisor Cisco Firepower 4000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 Network
Module (NM) slots for I/O expansion
Network modules ● 8 x 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) network modules
● 4 x 40 Gigabit Ethernet Quad SFP+ network modules
Note: Firepower 4100 Series appliances may also be deployed as dedicated threat
sensors, with fail-to-wire network modules. Please contact your Cisco representative for
details.
Maximum number of interfaces Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+)
interfaces with 2 network modules
Power Configuration Single 1100W AC, Single 1100W AC, dual Dual 1100W AC1 Dual 1100W AC1
supplies dual optional. optional. Single/dual
Single/dual 950W 950W DC optional1
DC optional1, 2
AC frequency 50 to 60 Hz
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 13 of 24
Features Cisco Firepower Model
Redundancy 1+1
Noise 78 dBA
Weight 36 lb (16 kg): 2 x power supplies, 2 x NMs, 6x fans; 30 lb (13.6 kg): no power supplies, no
NMs, no fans
1
Dual power supplies are hot-swappable.
Specification Description
Form factor 3 Rack Units (3RU), fits standard 19-in. (48.3-cm) square-hole rack
Supervisor Cisco Firepower 9000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 network module slots
for I/O expansion
Security modules ● Cisco Firepower 9000 Security Module 24 with 2 x SSDs in RAID-1 configuration
Network modules ● 8 x 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) network modules
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 14 of 24
Specification Description
● 4 x 40 Gigabit Ethernet Quad SFP+ network modules
● 2 x 100 Gigabit Ethernet Quad SFP28 network modules (double-wide, occupies both network module
bays)
Note: Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire
network modules. Please contact your Cisco representative for details.
Maximum number of interfaces Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces
with 2 network modules
Storage Up to 2.4 TB per chassis (800 GB per security module in RAID-1 configuration)
Frequency 50 to 60 Hz - -
Efficiency (at 50% load) 92% 92% 92% (at 50% load)
Redundancy 1+1
Weight 105 lb (47.7 kg) with one security module; 135 lb (61.2 kg) fully configured
Temperature: standard operating Up to 10,000 ft (3000 M): 32 to 104°F (0 to 40°C) for SM-24 module
32 to 88°F (0 to 35°C) for SM-36 module at sea-level
Altitude adjustment notes:
For SM-36, maximum temp is 35⁰C, for every 1000 feet above sea level subtract 1⁰C
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 15 of 24
Specification Description
*
Minimum turn-on voltage is -44V DC.
Table 7. Cisco Firepower 2100 Series, 4100 Series and Cisco Firepower 9300 NEBS, Regulatory, Safety, and EMC Compliance
Specification Description
NEBS Cisco Firepower 9300 is NEBS compliant with SM-24 Security Modules. Cisco Firepower 4120 is
NEBS compliant
Regulatory compliance Products comply with CE markings per directives 2004/108/EC and 2006/108/EC
Safety ● UL 60950-1
● CAN/CSA-C22.2 No. 60950-1
● EN 60950-1
● IEC 60950-1
● AS/NZS 60950-1
● GB4943
● EN55022 Class A
● ICES003 Class A
● VCCI Class A
● EN61000-3-2
● EN61000-3-3
● KN22 Class A
● CNS13438 Class A
● EN300386
● TCVN7189
● EN-61000-4-6
● EN-61000-4-8
● EN-61000-4-11
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 16 of 24
Cisco Trust Anchor Technologies
Cisco Trust Anchor Technologies provide a highly secure foundation for certain Cisco products. They enable hardware and
software authenticity assurance for supply chain trust and strong mitigation against a man-in-the-middle compromise of
software and firmware.
● Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and other software
are authentic and unmodified. As the system boots, the system’s software signatures are checked for integrity.
● Secure Boot: Secure Boot anchors the boot sequence chain of trust to immutable hardware, mitigating threats
against a system’s foundational state and the software that is to be loaded, regardless of a user’s privilege level. It
provides layered protection against the persistence of illicitly modified firmware.
● Trust Anchor module: A tamper-resistant, strong-cryptographic, single-chip solution provides hardware
authenticity assurance to uniquely identify the product so that its origin can be confirmed to Cisco, providing
assurance that the product is genuine.
4110 no yes
Radware vDP is an award-winning, real-time, behavioral DDoS attack mitigation solution that protects organizations
against multiple DDoS threats. Firepower DDoS mitigation defends your application infrastructure against network and
application degradation and outage.
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 17 of 24
● Application DDoS attacks, including HTTP floods and DNS query floods
● Anomalous flood attacks, such as nonstandard and malformed packet attacks
Performance
The performance figures in Table 8 apply to all Cisco Firepower 4100 series models.
Table 8. Key DDoS Performance Metrics for Cisco Firepower 4100 Series
Parameter Value
Maximum DDoS flood attack prevention rate 1,800,000 Packets Per Second (PPS)
The performance figures in Table 9 are for Cisco Firepower 9300 with 1 to 3 Security Modules irrespective of Security
Module type (SM-24, SM-36 or SM-44).
Table 9. Key DDoS Performance Metrics for Cisco Firepower 9300 with 1, 2, or 3 Security Modules.
Parameter Firepower 9300 with 1 Security Firepower 9300 with 2 Security Firepower 9300 with 3 Security
Module Modules Modules
Maximum legitimate 209,000 Connections Per Second 418,000 Connections Per Second 627,000 Connections Per Second
concurrent sessions (CPS) (CPS) (CPS)
Maximum DDoS flood 1,800,000 Packets Per Second 3,600,000 Packets Per Second 5,400,000 Packets Per Second (PPS)
attack prevention rate (PPS) (PPS)
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 18 of 24
Ordering Information
Cisco Smart Licensing
The Cisco Firepower NGFW is sold with Cisco Smart Licensing. Cisco understands that purchasing, deploying, managing,
and tracking software licenses is complex. As a result, we are introducing Cisco Smart Software Licensing, a standardized
licensing platform that helps customers understand how Cisco software is used across their network, thereby reducing
administrative overhead and operating expenses.
With Smart Licensing, you have a complete view of software, licenses, and devices from one portal. Licenses are easily
registered and activated and can be shifted between like hardware platforms. Additional information is available here:
https://www.cisco.com/web/ordering/smart-software-licensing/index.html. Related information, on Smart Licensing
Smart Accounts, is available here: https://www.cisco.com/web/ordering/smart-software-manager/smart-accounts.html.
Cisco Smart Net Total Care Support: Move Quickly with Anytime Access to Cisco Expertise and Resources
Cisco Smart Net Total Care™ is an award-winning technical support service that gives your IT staff direct anytime access
to Technical Assistance Center (TAC) engineers and Cisco.com resources. You receive the fast, expert response and the
dedicated accountability you require to resolve critical network issues.
● Global access 24 hours a day, 365 days a year to specialized engineers in the Cisco TAC
● Anytime access to the extensive Cisco.com online knowledge base, resources, and tools
● Hardware replacement options include 2-hour, 4-hour, Next-Business-Day (NDB) advance replacement, as well as
Return For Repair (RFR)
● Ongoing operating system software updates, including both minor and major releases within your licensed feature
set
● Proactive diagnostics and real-time alerts on select devices with Smart Call Home
In addition, with the optional Cisco Smart Net Total Care Onsite Service, a field engineer installs replacement parts at
your location and helps ensure that your network operates optimally. For more information on Smart Net Total Care
please visit: https://www.cisco.com/c/en/us/services/portfolio/product-technical-support/smart-net-total-care.html.
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 19 of 24
Part Number (Appliance Master Bundle) Description
FPR2130-NGFW-K9 Cisco Firepower 2130 NGFW Appliance, 1RU, 1 x Network Module Bays
FPR2140-NGFW-K9 Cisco Firepower 2140 NGFW Appliance, 1RU, 1 x Network Module Bays
L-FPR2110T-TMC= Cisco Firepower 2110 Threat Defense Threat, Malware, and URL License
L-FPR2120T-TMC= Cisco Firepower 2120 Threat Defense Threat, Malware, and URL License
L-FPR2130T-TMC= Cisco Firepower 2130 Threat Defense Threat, Malware, and URL License
L-FPR2140T-TMC= Cisco Firepower 2140 Threat Defense Threat, Malware, and URL License
Note: These optional security services licenses can be ordered with 1-, 3-, or 5-year subscriptions.
FPR2130-ASA-K9 Cisco Firepower 2130 ASA Appliance, 1RU, 1 x Network Module Bays
FPR2140-ASA-K9 Cisco Firepower 2140 ASA Appliance, 1RU, 1 x Network Module Bays
L-FPR2K-ENC-K9= License to enable strong encryption for ASA on Cisco Firepower 2100 Series
Hardware Accessories
Please consult the ordering guide for accessories including rack mounts, spare fans, power supplies, and Solid-State Drives (SSDs)
FPR4110-BUN Cisco Firepower 4110 Master Bundle, for ASA or Cisco Firepower Threat Defense
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 20 of 24
Part Number (Appliance Master Bundle) Description
Image
FPR4120-BUN Cisco Firepower 4120 Master Bundle, for ASA or Cisco Firepower Threat Defense
Image
FPR4140-BUN Cisco Firepower 4140 Master Bundle, for ASA or Cisco Firepower Threat Defense
Image
FPR4150-BUN Cisco Firepower 4150 Master Bundle, for ASA or Cisco Firepower Threat Defense
Image
Hardware Accessories
Please consult the ordering guide for accessories including rack mounts, spare fans, power supplies, and Solid-State Drives (SSDs)
L-FPR4K-ENCR-K9 License to enable strong encryption for ASA on Cisco Firepower 4100 Series
L-FPR4110T-TMC= Cisco Firepower 4110 Threat Defense Threat, Malware, and URL License
L-FPR4120T-TMC= Cisco Firepower 4120 Threat Defense Threat, Malware, and URL License
L-FPR4140T-TMC= Cisco Firepower 4140 Threat Defense Threat, Malware, and URL License
L-FPR4150T-TMC= Cisco Firepower 4150 Threat Defense Threat, Malware, and URL License
Note: These optional security services licenses can be ordered with 1-, 3-, or 5-year subscriptions.
FPR-C9300-AC Cisco Firepower 9300 AC Chassis - includes 2 power supply units + 4 fans + rack-mount
kit (3RU; accommodates up to three security modules)
FPR-C9300-DC Cisco Firepower 9300 DC Chassis - includes 2 power supply units + 4 fans + rack-mount
kit (3RU; accommodates up to three security modules)
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 21 of 24
Part Number (Chassis) Description
FPR-C9300-HVDC Cisco Firepower 9300 high-voltage DC Chassis - includes 2 power supply units + 4 fans +
rack-mount kit (3RU; accommodates up to three security modules)
L-F9K-ASA-ENCR-K9 License to enable strong encryption in ASA running on Cisco Firepower 9000
FPR9K-TD-BASE Cisco Firepower Threat Defense Base License for Cisco Firepower 9300 NGFW
L-FPR9K-SM24-TMC= Cisco Firepower 9000 SM-24 Threat Defense Threat, Malware, and URL License
L-FPR9K-SM24-TMC-3Y Cisco Firepower 9000 SM-24 Threat Defense Threat, Malware, and URL 3Yr Svc
L-FPR9K-SM36-TMC= Cisco Firepower 9000 SM-36 Threat Defense Threat, Malware, and URL License
L-FPR9K-SM36-TMC-3Y Cisco Firepower 9000 SM-36 Threat Defense Threat, Malware, and URL 3Yr Svc
L-FPR9K-SM44-TMC= Cisco Firepower 9000 SM-44 Threat Defense Threat, Malware, and URL License
L-FPR9K-SM44-TMC-3Y Cisco Firepower 9000 SM-44 Threat Defense Threat, Malware, and URL 3Yr Svc
*
Note: Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for
details.
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 22 of 24
Warranty Information
Find warranty information on cisco.com at the Product Warranties page.
Cisco Services
Cisco offers a wide range of service programs to accelerate customer success. These innovative services programs are
delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer
satisfaction. Cisco Services help you protect your network investment, optimize network operations, and prepare your
network for new applications to extend network intelligence and the power of your business. For more information about
Cisco services for security, visit https://www.cisco.com/go/services/security.
Cisco Capital
Flexible payment solutions to help you achieve your objectives
Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation
and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate
growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and
complementary third-party equipment in easy, predictable payments. Learn more.
● https://www.cisco.com/c/en/us/solutions/enterprise-networks/service-provider-security-solutions/
● https://www.cisco.com/go/ngfw
https://www.cisco.com/go/anyconnect
● Cisco AnyConnect Ordering Guide
https://www.cisco.com/c/dam/en/us/products/security/anyconnect-og.pdf
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 23 of 24
Document History
New or Revised Topic Described In Date
Added performance testing information, and updated performance table Table 1 9-Oct-18
Removed explicit software version numbers from Table 5 and referred readers to the current Table 5 19-Jul-18
release note pages
© 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 24 of 24