لایسنس FTD PLR

Throughput: FW + AVC (1024B)

2.6 Gbps

3.4 Gbps

5.4 Gbps

10.4 Gbps

Throughput: FW + AVC + IPS (1024B)

2.6 Gbps

3.4 Gbps

5.4 Gbps

10.4 Gbps

Maximum concurrent sessions, with AVC

1 million

1.5 million

2 million

3 million

Maximum new connections per second, with AVC

14K

18K

30K

57K

TLS

365 Mbps

475 Mbps

760 Mbps

1.4 Gbps

Throughput: IPS (1024B)

2.6 Gbps

3.5 Gbps

5.4 Gbps

10.5 Gbps

IPSec VPN Throughput (1024B TCP w/Fastpath)

950 Mbps

1.2 Gbps

1.9 Gbps

3.6 Gbps

Maximum VPN Peers

1,500

3,500

7,500

10,000

Cisco Firepower Device Manager (local management)

Yes

Yes

Yes

Yes

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator

Application Visibility and Control (AVC)

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco Firepower NGIPS

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco AMP for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available

Cisco AMP Threat Grid sandboxing

Available

URL Filtering: number of categories

More than 80

URL Filtering: number of URLs categorized

More than 280 million

High availability and clustering

Active/standby

Throughput: FW + AVC (1024B)

19 Gbps

33 Gbps

45 Gbps

53 Gbps

Throughput: FW + AVC + IPS (1024B)

19 Gbps

33 Gbps

45 Gbps

53 Gbps

Maximum concurrent sessions, with AVC

10 million

15 million

25 million

30 million

Maximum new connections per second, with AVC

98K

210K

269K

365K

TLS (Hardware Decryption)¹

4.5 Gbps

6.5 Gbps

8.5 Gbps

10 Gbps

Throughput: NGIPS (1024B)

19 Gbps

33 Gbps

45 Gbps

55 Gbps

IPSec VPN Throughput
(1024B TCP w/Fastpath)

8.5 Gbps

12.5 Gbps

19 Gbps

24 Gbps

Maximum VPN Peers

10,000

15,000

20,000

20,000

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator

Application Visibility and
Control (AVC)

Standard, supporting more than 6000 applications, as well as geolocations, users, and websites

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco Secure IPS License

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Malware Defense for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available

Cisco Malware Analytics sandboxing

Available

URL filtering: number
of categories

More than 120

URL filtering: number of
URLs categorized

More than 280 million

High availability

Cisco Secure Firewall 4100 Series with Firepower Threat Defense in HA configuration supports Active/Standby setup. This is available at the appliance level or logical instances defined on two different appliances. Please check latest High Availability Configuration Guide chapter for guidelines and best practices.

Clustering

Cisco Secure Firewall 4100 Series with Firepower Threat Defense allows clustering of up to 16 appliances, or up to 16 instances across different appliances running Multi Instance feature. Clustering allows to increase overall performance and scale. Please check latest Clustering Configuration Guide chapter for guidelines and best practices.