FPR1120-NGFW-K9 Cisco Firepower 1120 NGFW Appliance, 1U

Technical specifications

Throughput: Firewall (FW) Application Visibility and Control (AVC) (1024B)

1.5 Gbps

Throughput: FW AVC Intrusion Prevention System (IPS) (1024B)

1.5 Gbps

Maximum concurrent sessions, with AVC

200K

Maximum new connections per second, with AVC

15K

Transport Layer Security (TLS)

700 Mbps

Throughput: IPS (1024B)

1.5 Gbps

IPSec VPN throughput (1024B TCP w/Fastpath)

1 Gbps

Maximum VPN Peers

150

Cisco Device Manager (local management)

Yes

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Threat Defense Manager (FMC) or, alternatively, from the cloud with Cisco Defense Orchestrator

AVC

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open-source application detectors

Standard

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco IPS

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Malware Defense for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks.

Integrated threat correlation with Cisco AMP for Endpoints is also optionally available

Cisco Malware Analytics sandboxing

Available

URL filtering: number of categories

More than 80

URL filtering: number of URLs categorized

More than 280 million

Automated threat feed and IPS signature updates

Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos^® group (https://www.cisco.com/c/en/us/products/security/talos.html)

Third-party and open- source ecosystem

Open API for integrations with third-party products; Snort^® and OpenAppID community resources for new and specific threats

High availability and clustering

Active/standby

Cisco Trust Anchor Technologies

Cisco Firepower 1000 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details

Stateful inspection firewall throughput¹

4.5 Gbps

Stateful inspection firewall throughput (multiprotocol)²

2.5 Gbps

Concurrent firewall connections

200,000

Firewall latency (UDP 64B microseconds)

—

New connections per second

75,000

IPsec VPN throughput (450B UDP L2L test)

1 Gbps

Maximum VPN Peers

150

Security contexts (included; maximum)

2; 5

High availability

Active/active and Active/standby

Clustering

—

Scalability

VPN Load Balancing

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator

Adaptive Security Device Manager

Web-based, local management for small-scale deployments

Dimensions
(H x W x D)

1.72 x 17.2 x 10.58 in.

Form factor (rack units)

1RU

Integrated I/O

8 x RJ-45, 4 x SFP

Integrated network management ports

1 x 10M/100M/1GBASE-T

Ethernet port (RJ-45)

Serial port

1 x RJ-45 console

USB

1 x USB 3.0 Type-A (500mA)

Storage

1 x 200 GB

Power supply configuration

12V

AC input voltage

100 to 240V AC

AC maximum input current

< 2A at 100V, < 1A at 240V

AC maximum output power

100W

AC frequency

50 to 60 Hz

AC efficiency

>85% at 50% load

Redundancy

None

Fans

1 integrated fan²

Noise

31.7 dBA @ 25C, 56.8

dBA at highest system performance

Rack mountable

Yes. Fixed mount brackets included (2- post).

Weight

8 lb (3.63 kg)

Temperature: operating

32 to 104°F (0 to 40°C)

Temperature: nonoperating

-13 to 158°F (-25 to 70°C)

Humidity: operating

90% noncondensing

Humidity: nonoperating

10 to 90% noncondensing

Altitude: operating

9843 ft (max)

3000 m (max)

Altitude: nonoperating

15,000 ft (max)

Regulatory compliance

Products comply with CE markings per directives 2004/108/EC and 2006/108/EC

Safety

EMC: emissions

EMC: immunity