FPR2140-NGFW-K9 Cisco Firepower 2140 NGFW Appliance, 1U, 1 x NetMod Bay
31,358.84$
Technical specifications |
|
|
Throughput: FW AVC (1024B) |
9 Gbps |
|||
|
Throughput: FW AVC IPS (1024B) |
9 Gbps |
|||
|
Maximum concurrent sessions, with AVC |
3 million |
|||
|
Maximum new connections per second, with AVC |
57K |
|||
|
TLS |
1.4 Gbps |
|||
|
Throughput: IPS (1024B) |
9 Gbps |
|||
|
IPSec VPN Throughput (1024B TCP w/Fastpath) |
3.2 Gbps |
|||
|
Maximum VPN Peers |
10,000 |
|||
|
Cisco Firepower Device Manager (local management) |
Yes |
|||
|
Centralized management |
Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator |
|||
|
Application Visibility and Control (AVC) |
Standard, supporting more than 4000 applications, as well as geolocations, users, and websites |
|||
|
AVC: OpenAppID support for custom, open source, application detectors |
Standard |
|||
|
Cisco Security Intelligence |
Standard, with IP, URL, and DNS threat intelligence |
|||
|
Cisco Firepower NGIPS |
Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence |
|||
|
Cisco AMP for Networks |
Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available |
|||
|
Cisco AMP Threat Grid sandboxing |
Available |
|||
|
URL Filtering: number of categories |
More than 80 |
|||
|
URL Filtering: number of URLs categorized |
More than 280 million |
|||
|
Automated threat feed and IPS signature updates |
Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos Group (https://www.cisco.com/c/en/us/products/security/talos.html) |
|||
|
Third-party and open-source ecosystem |
Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats |
|||
|
High availability and clustering |
Active/standby |
|||
|
Cisco Trust Anchor Technologies |
Firepower 2100 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details |
|||
ASA Performance and capabilities
|
Stateful inspection firewall throughput1 |
20 Gbps |
|||
|
Stateful inspection firewall throughput (multiprotocol)2 |
10 Gbps |
|||
|
Concurrent firewall connections |
3 million |
|||
|
New connections per second |
75,000 |
|||
|
IPsec VPN throughput (450B UDP L2L test) |
2 Gbps |
|||
|
Maximum VPN Peers |
10,000 |
|||
|
Security contexts (included; maximum) |
2; 40 |
|||
|
High availability |
Active/active and active/standby |
|||
|
Clustering |
||||
|
Scalability |
VPN Load Balancing |
|||
|
Centralized management |
Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator |
|||
|
Adaptive Security Device Manager |
Web-based, local management for small-scale deployments |
|||
Hardware specifications
|
Dimensions (H x W x D) |
1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
|||
|
Form factor (rack units) |
1RU |
|||
|
Integrated I/O |
12 x 10M/100M/ 1GBASE-T Ethernet interfaces (RJ- 45), 4 x 10 Gigabit (SFP ) Ethernet interfaces |
|||
|
Network modules |
10G SFP , 1/10G FTW Options |
|||
|
Maximum number of interfaces |
Up to 24 total Ethernet ports (12x1G RJ-45, 4x10G SFP , and network module |
|||
|
Integrated network management ports |
1 x 10M/100M/ 1GBASE-T Ethernet port (RJ-45) |
|||
|
Serial port |
1 x RJ-45 console |
|||
|
USB |
1 x USB 2.0 Type-A (500mA) |
|||
|
Storage |
1x 200 GB, 1x spare slot (for MSP) |
|||
|
Power supply configuration |
Dual 400W AC. Single/dual 350W DC optional1 |
|||
|
AC input voltage |
100 to 240V AC |
|||
|
AC maximum input current |
< 6A at 100V |
|||
|
AC maximum output power |
400W |
|||
|
AC frequency |
50 to 60 Hz |
|||
|
AC efficiency |
>89% at 50% load |
|||
|
DC input voltage |
-48V to -60VDC |
|||
|
DC maximum input current |
< 12.5A at -48V |
|||
|
DC maximum output power |
350W |
|||
|
DC efficiency |
>88% at 50% load |
|||
|
Redundancy |
1 1 AC or DC with dual supplies |
|||
|
Fans |
1 hot-swappable fan module (with 4 fans)2 |
|||
|
Noise |
56 dBA @ 25C 77 dBA at highest system performance. |
|||
|
Rack mountable |
Yes. Mount rails included (4-post EIA-310-D rack) |
|||
|
Weight |
21 lb (9.53 kg) 2 x power supplies, 1 x NM, 1 x fan module, 2x SSDs |
|||
|
Temperature: operating |
32 to 104°F (0 to 40°C) |
|||
|
Temperature: nonoperating |
-4 to 149°F (-20 to 65°C) |
|||
|
Humidity: operating |
10 to 85% noncondensing |
|||
|
Humidity: nonoperating |
5 to 95% noncondensing |
|||
|
Altitude: operating |
10,000 ft (max) |
|||
|
Altitude: nonoperating |
40,000 ft (max) |
|||
Safety and compliance information
|
Regulatory compliance |
Products comply with CE markings per directives 2004/108/EC and 2006/108/EC |
|
Safety |
● UL 60950-1
● CAN/CSA-C22.2 No. 60950-1
● EN 60950-1
● IEC 60950-1
● AS/NZS 60950-1
● GB4943
|
|
EMC: emissions |
● 47CFR Part 15 (CFR 47) Class A (FCC Class A)
● AS/NZS CISPR22 Class A
● CISPR22 CLASS A
● EN55022 Class A
● ICES003 Class A
● VCCI Class A
● EN61000-3-2
● EN61000-3-3
● KN22 Class A
● CNS13438 Class A
● EN300386
● TCVN7189
|
|
EMC: Immunity |
● EN55024
● CISPR24
● EN300386
● KN24
● TVCN 7317
● EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6, EN-61000-4-8, EN61000-4-11
|