TD.TEK - BRING YOUR VALUE TO OUR SUCCESS
Cisco Firepower 4150 Threat Defense Threat, Malware, and URL License
Tables 5, 6, and 7 summarize the hardware specifications for the 2100 Series, 4100 Series, and 9300 Series, respectively. Table 8 summarizes regulatory standards compliance. For Cisco ASA 5500-X Series hardware specifications, please visit the Cisco ASA with FirePOWER Services data sheet.
Features |
Cisco Firepower Model |
||||||
2110 |
2120 |
2130 |
2140 |
||||
Dimensions (H x W x D) |
1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
||||||
Form factor (rack units) |
1RU |
||||||
Security module slots |
- |
||||||
I/O module slots |
0 |
1 NM slot |
|||||
Integrated I/O |
12 x 10M/100M/1GBASE-T Ethernet interfaces (RJ-45), 4 x 1 Gigabit (SFP) Ethernet interfaces |
12 x 10M/100M/1GBASE-T Ethernet interfaces (RJ-45), 4 x 10 Gigabit (SFP+) Ethernet interfaces |
|||||
Network modules |
None |
(FPR-NM-8X10G) 8 x 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) network module |
|||||
Note: The 2100 Series appliances may also be deployed as dedicated threat sensors with fail-to-wire network modules. Please contact your Cisco representative for details. |
|||||||
Maximum number of interfaces |
Up to 16 total Ethernet ports |
Up to 24 total Ethernet ports (12x1G RJ-45, 4x10G SFP+, and network module with 8x10G SFP+) |
|||||
Integrated network management ports |
1 x 10M/100M/1GBASE-T Ethernet port (RJ-45) |
||||||
Serial port |
1 x RJ-45 console |
||||||
USB |
1 x USB 2.0 Type-A (500mA) |
||||||
Storage |
1x 100 GB, 1x spare slot (for MSP) |
1x 100 GB, 1x spare slot (for MSP) |
1x 200 GB, 1x spare slot (for MSP) |
1x 200 GB, 1x spare slot (for MSP) |
|||
Power supplies |
Configuration |
Single integrated 250W AC power supply. |
Single 400W AC, Dual 400W AC optional. Single/Dual 350W DC optional1 |
Dual 400W AC. Single/dual 350W DC optional1 |
|||
AC input voltage |
100 to 240V AC |
100 to 240V AC |
|||||
AC maximum input current |
< 2.7A at 100V |
< 6A at 100V |
|||||
AC maximum output power |
250W |
400W |
|||||
AC frequency |
50 to 60 Hz |
50 to 60 Hz |
|||||
AC efficiency |
>88% at 50% load |
>89% at 50% load |
|||||
DC input voltage |
- |
-48V to -60VDC |
|||||
DC maximum input current |
- |
< 12.5A at -48V |
|||||
DC maximum output power |
- |
350W |
|||||
DC efficiency |
- |
>88% at 50% load |
|||||
Redundancy |
None |
1+1 AC or DC with dual supplies |
|||||
Fans |
4 integrated (2 internal, 2 exhaust) fans2 |
1 hot-swappable fan module (with 4 fans)2 |
|||||
Noise |
56 dBA @ 25C 74 dBA at highest system performance. |
56 dBA @ 25C 77 dBA at highest system performance. |
|||||
Rack mountable |
Yes. Fixed mount brackets included |
Yes. Mount rails included (4-post EIA-310-D rack) |
|||||
Weight |
16.1 lb (7.3 kg): with 2x SSDs |
19.4 lb (8.8 kg) 1 x power supplies, 1 x NM, 1 x fan module, 2x SSDs |
21 lb (9.53 kg) 2 x power supplies, 1 x NM, 1 x fan module, 2x SSDs |
||||
Temperature: operating |
32 to 104°F (0 to 40°C) |
32 to 104°F (0 to 40°C) or NEBS operation (see below)3 |
32 to 104°F (0 to 40°C) |
||||
Temperature: nonoperating |
-4 to 149°F (-20 to 65°C) |
||||||
Humidity: operating |
10 to 85% noncondensing |
||||||
Humidity: nonoperating |
5 to 95% noncondensing |
||||||
Altitude: operating |
10,000 ft (max) |
10,000 ft (max) or NEBS operation (see below)3 |
10,000 ft (max) |
||||
Altitude: nonoperating |
40,000 ft (max) |
||||||
NEBS operation (FPR-2130 Only)3 |
Operating altitude: 0 to 13,000 ft (3962 m) Operating temperature: Long term: 0 to 45°C, up to 6,000 ft (1829 m) Long term: 0 to 35°C, 6,000 to 13,000 ft (1829 to 3964 m) Short term: -5 to 55°C, up to 6,000 ft (1829 m) |
||||||
1 Dual power supplies are hot-swappable.
2 Fans operate in a 3+1 redundant configuration where the system will continue to function with only 3 operational fans. The 3 remaining fans will run at full speed.
3 FPR-2130 platform is designed to be NEBS ready. The availability of NEBS certification is pending.
Features |
Cisco Firepower Model |
||||||
4110 |
4120 |
4140 |
4150 |
||||
Dimensions (H x W x D) |
1.75 x 16.89 x 29.7 in. (4.4 x 42.9 x 75.4 cm) |
||||||
Form factor (rack units) |
1RU |
||||||
Security module slots |
- |
||||||
I/O module slots |
2 |
||||||
Supervisor |
Cisco Firepower 4000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 Network Module (NM) slots for I/O expansion |
||||||
Network modules |
Note: Firepower 4100 Series appliances may also be deployed as dedicated threat sensors, with fail-to-wire network modules. Please contact your Cisco representative for details. |
||||||
Maximum number of interfaces |
Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules |
||||||
Integrated network management ports |
1 x Gigabit Ethernet copper port |
||||||
Serial port |
1 x RJ-45 console |
||||||
USB |
1 x USB 2.0 |
||||||
Storage |
200 GB |
200 GB |
400 GB |
400 GB |
|||
Power supplies |
Configuration |
Single 1100W AC, dual optional. Single/dual 950W DC optional1, 2 |
Single 1100W AC, dual optional. Single/dual 950W DC optional1 |
Dual 1100W AC1 |
Dual 1100W AC1 |
||
AC input voltage |
100 to 240V AC |
||||||
AC maximum input current |
13A |
||||||
AC maximum output power |
1100W |
||||||
AC frequency |
50 to 60 Hz |
||||||
AC efficiency |
>92% at 50% load |
||||||
DC input voltage |
-40V to -60VDC |
||||||
DC maximum input current |
27A |
||||||
DC maximum output power |
950W |
||||||
DC efficiency |
>92.5% at 50% load |
||||||
Redundancy |
1+1 |
||||||
Fans |
6 hot-swappable fans |
||||||
Noise |
78 dBA |
||||||
Rack mountable |
Yes, mount rails included (4-post EIA-310-D rack) |
||||||
Weight |
36 lb (16 kg): 2 x power supplies, 2 x NMs, 6x fans; 30 lb (13.6 kg): no power supplies, no NMs, no fans |
||||||
Temperature: operating |
32 to 104°F |
32 to 104°F |
32 to 95°F (0 to 35°C), at sea level |
32 to 95°F (0 to 35°C), at sea level |
|||
Temperature: nonoperating |
-40 to 149°F (-40 to 65°C) |
||||||
Humidity: operating |
5 to 95% noncondensing |
||||||
Humidity: nonoperating |
5 to 95% noncondensing |
||||||
Altitude: operating |
10,000 ft (max) |
10,000 ft (max) or NEBS operation (see below) |
10,000 ft (max) |
||||
Altitude: nonoperating |
40,000 ft (max) |
||||||
NEBS operation (FPR 4120 only) |
Operating altitude: 0 to 13,000 ft (3960 m) Operating temperature: Long term: 0 to 45°C, up to 6,000 ft (1829 m) Long term: 0 to 35°C, 6,000 to 13,000 ft (1829 to 3964 m) Short term: -5 to 50°C, up to 6,000 ft (1829 m) |
||||||
1 Dual power supplies are hot-swappable.
Specification |
Description |
|||
Dimensions (H x W x D) |
5.25 x 17.5 x 32 in. (13.3 x 44.5 x 81.3 cm) |
|||
Form factor |
3 Rack Units (3RU), fits standard 19-in. (48.3-cm) square-hole rack |
|||
Security module slots |
3 |
|||
Network module slots |
2 (within supervisor) |
|||
Supervisor |
Cisco Firepower 9000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 network module slots for I/O expansion |
|||
Security modules |
|
|||
Network modules |
Note: Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for details. |
|||
Maximum number of interfaces |
Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules |
|||
Integrated network management ports |
1 x Gigabit Ethernet copper port (on supervisor) |
|||
Serial port |
1 x RJ-45 console |
|||
USB |
1 x USB 2.0 |
|||
Storage |
Up to 2.4 TB per chassis (800 GB per security module in RAID-1 configuration) |
|||
Power supplies |
|
AC power supply |
-48V DC power supply |
HVDC power supply |
Input voltage |
200 to 240V AC |
-40V to -60V DC* |
240 to 380V DC |
|
Maximum input current |
15.5A to 12.9A |
69A to 42A |
<14A at 200V |
|
Maximum output power |
2500W |
2500W |
2500W |
|
Frequency |
50 to 60 Hz |
- |
- |
|
Efficiency (at 50% load) |
92% |
92% |
92% (at 50% load) |
|
Redundancy |
1+1 |
|||
Fans |
4 hot-swappable fans |
|||
Noise |
75.5 dBA at maximum fan speed |
|||
Rack mountable |
Yes, mount rails included (4-post EIA-310-D rack) |
|||
Weight |
105 lb (47.7 kg) with one security module; 135 lb (61.2 kg) fully configured |
|||
Temperature: standard operating |
Up to 10,000 ft (3000 M): 32 to 104°F (0 to 40°C) for SM-24 module 32 to 88°F (0 to 35°C) for SM-36 module at sea-level Altitude adjustment notes: For SM-36, maximum temp is 35⁰C, for every 1000 feet above sea level subtract 1⁰C |
|||
Temperature: NEBS operating |
Long term: 0 to 45°C, up to 6,000 ft (1829 m) Long term: 0 to 35°C, 6,000 to 13,000 ft (1829-3964 m) Short term: -5 to 55°C, up to 6,000 ft (1829 m) Note: Cisco Firepower 9300 NEBS compliance applies only to SM-24 configurations. |
|||
Temperature: nonoperating |
-40 to 149°F (-40 to 65°C); maximum altitude is 40,000 ft |
|||
Humidity: operating |
5 to 95% noncondensing |
|||
Humidity: nonoperating |
5 to 95% noncondensing |
|||
Altitude: operating |
SM-24: 0 to 13,000 ft (3962 m) SM-36: 0 to 10,000 ft (3048 m); please see above Operating Temperature section for temperature adjustment notes |
|||
Altitude: nonoperating |
40,000 ft (12,192 m) |
* Minimum turn-on voltage is -44V DC
Specification |
Description |
NEBS |
Cisco Firepower 9300 is NEBS compliant with SM-24 Security Modules. Cisco Firepower 4120 is NEBS compliant. |
Regulatory compliance |
Products comply with CE markings per directives 2004/108/EC and 2006/108/EC |
Safety |
UL 60950-1 CAN/CSA-C22.2 No. 60950-1 EN 60950-1 IEC 60950-1 AS/NZS 60950-1 GB4943 |
EMC: emissions |
47CFR Part 15 (CFR 47) Class A (FCC Class A) AS/NZS CISPR22 Class A CISPR22 CLASS A EN55022 Class A ICES003 Class A VCCI Class A EN61000-3-2 EN61000-3-3 KN22 Class A CNS13438 Class A EN300386 TCVN7189 |
EMC: Immunity |
EN55024 CISPR24 EN300386 KN24 TVCN 7317 EN-61000-4-2 EN-61000-4-3 EN-61000-4-4 EN-61000-4-5 EN-61000-4-6 EN-61000-4-8 EN-61000-4-11 |
Cisco Trust Anchor Technologies
Cisco Trust Anchor Technologies provide a highly secure foundation for certain Cisco products. They enable hardware and software authenticity assurance for supply chain trust and strong mitigation against a man-in-the-middle compromise of software and firmware.
Trust Anchor capabilities include:
Firepower DDoS Mitigation is provided by Radware Virtual DefensePro (vDP), available and supported directly from Cisco on the following Cisco Firepower 9300 and 4100 series appliances:
Cisco Firepower Model |
ASA image |
FTD Image |
9300 – SM-44 |
yes |
yes |
9300 – SM-36 |
yes |
yes |
9300 – SM-24 |
yes |
yes |
4150 |
yes |
yes |
4140 |
yes |
yes |
4120 |
yes |
yes |
4110 |
no |
yes |
Radware vDP is an award-winning, real-time, behavioral DDoS attack mitigation solution that protects organizations against multiple DDoS threats. Firepower DDoS mitigation defends your application infrastructure against network and application degredation and outage.
Firepower’s vDP DDoS mitigation consists of patent-protected, adaptive, behavioral-based real-time signature technology that detects and mitigates zero-day network and application DDoS attacks in real time. It eliminates the need for human intervention and does not block legitimate user traffic when under attack.
The following attacks are detected and mitigated:
The performance figures in Table 9 apply to all Cisco Firepower 4100 series models.
Parameter |
Value |
Maximum mitigation capacity/throughput |
10 Gbps |
Maximum legitimate concurrent sessions |
209,000 Connections Per Second (CPS) |
Maximum DDoS flood attack prevention rate |
1,800,000 Packets Per Second (PPS) |
The performance figures in Table 10 are for Cisco Firepower 9300 with 1 to 3 Security Modules irrespective of Security Module type (SM-24, SM-36 or SM-44).
Parameter |
Firepower 9300 with 1 Security Module |
Firepower 9300 with 2 Security Modules |
Firepower 9300 with 3 Security Modules |
Maximum mitigation capacity/throughput |
10 Gbps |
20 Gbps |
30 Gbps |
Maximum legitimate concurrent sessions |
209,000 Connections Per Second (CPS) |
418,000 Connections Per Second (CPS) |
627,000 Connections Per Second (CPS) |
Maximum DDoS flood attack prevention rate |
1,800,000 Packets Per Second (PPS) |
3,600,000 Packets Per Second (PPS) |
5,400,000 Packets Per Second (PPS) |
The Cisco Firepower NGFW is sold with Cisco Smart Licensing. Cisco understands that purchasing, deploying, managing, and tracking software licenses is complex. As a result, we are introducing Cisco Smart Software Licensing, a standardized licensing platform that helps customers understand how Cisco software is used across their network, thereby reducing administrative overhead and operating expenses.
With Smart Licensing, you have a complete view of software, licenses, and devices from one portal. Licenses are easily registered and activated and can be shifted between like hardware platforms. Additional information is available here: https://www.cisco.com/web/ordering/smart-software-licensing/index.html. Related information, on Smart Licensing Smart Accounts, is available here: https://www.cisco.com/web/ordering/smart-software-manager/smart-accounts.html.
Cisco Smart Net Total Care Support: Move Quickly with Anytime Access to Cisco Expertise and Resources
Cisco Smart Net Total Care™ is an award-winning technical support service that gives your IT staff direct anytime access to Technical Assistance Center (TAC) engineers and Cisco.com resources. You receive the fast, expert response and the dedicated accountability you require to resolve critical network issues.
Smart Net Total Care provides the following device-level support:
In addition, with the optional Cisco Smart Net Total Care Onsite Service, a field engineer installs replacement parts at your location and helps ensure that your network operates optimally. For more information on Smart Net Total Care please visit: https://www.cisco.com/c/en/us/services/portfolio/product-technical-support/smart-net-total-care.html.
Tables 11, 12, and 13 provide details on part numbers for Cisco Firepower NGFW solutions. Please consult the Ordering Guide for additional configuration options and accessories.
Part Number (Appliance Master Bundle) |
Description |
FPR2110-BUN |
Cisco Firepower 2110 Master Bundle |
FPR2120-BUN |
Cisco Firepower 2120 Master Bundle |
FPR2130-BUN |
Cisco Firepower 2130 Master Bundle |
FPR2140-BUN |
Cisco Firepower 2140 Master Bundle |
Part Number (Network Module) |
Description |
FPR2K-NM-8X10G= |
Spare Cisco Firepower 8-port SFP+ network module |
Part Number (Appliances with FTD software) |
|
FPR2110-NGFW-K9 |
Cisco Firepower 2110 NGFW Appliance, 1RU |
FPR2120-NGFW-K9 |
Cisco Firepower 2120 NGFW Appliance, 1RU |
FPR2130-NGFW-K9 |
Cisco Firepower 2130 NGFW Appliance, 1RU, 1 x Network Module Bays |
FPR2140-NGFW-K9 |
Cisco Firepower 2140 NGFW Appliance, 1RU, 1 x Network Module Bays |
Cisco Firepower 2100 Series NGFW Select Licenses |
|
L-FPR2110T-TMC= |
Cisco Firepower 2110 Threat Defense Threat, Malware, and URL License |
L-FPR2120T-TMC= |
Cisco Firepower 2120 Threat Defense Threat, Malware, and URL License |
L-FPR2130T-TMC= |
Cisco Firepower 2130 Threat Defense Threat, Malware, and URL License |
L-FPR2140T-TMC= |
Cisco Firepower 2140 Threat Defense Threat, Malware, and URL License |
Note: These optional security services licenses can be ordered with 1-, 3-, or 5-year subscriptions. |
Part Number (Appliances with ASA Software) |
|
FPR2110-ASA-K9 |
Cisco Firepower 2110 ASA Appliance, 1RU |
FPR2120-ASA-K9 |
Cisco Firepower 2120 ASA Appliance, 1RU |
FPR2130-ASA-K9 |
Cisco Firepower 2130 ASA Appliance, 1RU, 1 x Network Module Bays |
FPR2140-ASA-K9 |
Cisco Firepower 2140 ASA Appliance, 1RU, 1 x Network Module Bays |
Optional ASA Software Licenses |
Description |
L-FPR2K-ENC-K9= |
License to enable strong encryption for ASA on Cisco Firepower 2100 Series |
L-FPR2K-ASASC-10= |
Cisco Firepower 2100 Add-on 10 security context licenses |
L-FPR2K-ASASC-5= |
Cisco Firepower 2100 Add-on 5 security context licenses |
Hardware Accessories |
|
Please consult the ordering guide for accessories including rack mounts, spare fans, power supplies, and Solid-State Drives (SSDs) |
Part Number (Appliance Master Bundle) |
Description |
FPR4110-BUN |
Cisco Firepower 4110 Master Bundle, for ASA or Cisco Firepower Threat Defense Image |
FPR4120-BUN |
Cisco Firepower 4120 Master Bundle, for ASA or Cisco Firepower Threat Defense Image |
FPR4140-BUN |
Cisco Firepower 4140 Master Bundle, for ASA or Cisco Firepower Threat Defense Image |
FPR4150-BUN |
Cisco Firepower 4150 Master Bundle, for ASA or Cisco Firepower Threat Defense Image |
Part Number (Spare Network Module) |
Description |
FPR4K-NM-8X10G= |
Spare Cisco Firepower 8-port SFP+ network module |
FPR4K-NM-4X40G= |
Spare Cisco Firepower 4-port QSFP+ network module |
Hardware Accessories |
|
Please consult the ordering guide for accessories including rack mounts, spare fans, power supplies, and Solid-State Drives (SSDs) |
|
Optional ASA Software Licenses |
Description |
L-F4K-ASA-CAR |
License to add Carrier Security Features to ASA |
L-FPR4K-ENCR-K9 |
License to enable strong encryption for ASA on Cisco Firepower 4100 Series |
L-FPR4K-ASASC-10 |
Cisco Firepower 4100 Add-on 10 security context licenses |
Cisco Firepower 4100 Series NGFW Select Licenses |
|
L-FPR4110T-TMC= |
Cisco Firepower 4110 Threat Defense Threat, Malware, and URL License |
L-FPR4120T-TMC= |
Cisco Firepower 4120 Threat Defense Threat, Malware, and URL License |
L-FPR4140T-TMC= |
Cisco Firepower 4140 Threat Defense Threat, Malware, and URL License |
L-FPR4150T-TMC= |
Cisco Firepower 4150 Threat Defense Threat, Malware, and URL License |
Note: These optional security services licenses can be ordered with 1-, 3-, or 5-year subscriptions. |
Part Number (Chassis) |
Description |
FPR-C9300-AC |
Cisco Firepower 9300 AC Chassis - includes 2 power supply units + 4 fans + rack-mount kit (3RU; accommodates up to three security modules) |
FPR-C9300-DC |
Cisco Firepower 9300 DC Chassis - includes 2 power supply units + 4 fans + rack-mount kit (3RU; accommodates up to three security modules) |
FPR-C9300-HVDC |
Cisco Firepower 9300 high-voltage DC Chassis - includes 2 power supply units + 4 fans + rack-mount kit (3RU; accommodates up to three security modules) |
Part Number (Security Module) |
Description |
FPR9K-SM-24 |
24 Physical Core Security Module (NEBS Ready) |
FPR9K-SM-36 |
36 Physical Core Security Module |
FPR9K-SM-44 |
44 Physical Core Security Module |
ASA Software Licenses for Cisco Firepower 9300 |
Description |
L-F9K-ASA-CAR |
License to add Carrier Security Features to ASA |
L-F9K-ASA-CAR= |
License to add Carrier Security Features to ASA |
L-F9K-ASA-SC-10 |
License to add 10 Security Contexts to ASA in Cisco Firepower 9000 |
L-F9K-ASA-SC-10= |
License to add 10 Security Contexts to ASA in Cisco Firepower 9000 |
L-F9K-ASA |
License to run Standard ASA on a Cisco Firepower 9300 module |
L-F9K-ASA= |
License to run Standard ASA on a Cisco Firepower 9300 module |
L-F9K-ASA-ENCR-K9 |
License to enable strong encryption in ASA running on Cisco Firepower 9000 |
Cisco Firepower 9300 NGFW Threat Defense Software Licenses |
Description |
FPR9K-TD-BASE |
Cisco Firepower Threat Defense Base License for Cisco Firepower 9300 NGFW |
L-FPR9K-SM24-TMC= |
Cisco Firepower 9000 SM-24 Threat Defense Threat, Malware, and URL License |
L-FPR9K-SM24-TMC-3Y |
Cisco Firepower 9000 SM-24 Threat Defense Threat, Malware, and URL 3Yr Svc |
L-FPR9K-SM36-TMC= |
Cisco Firepower 9000 SM-36 Threat Defense Threat, Malware, and URL License |
L-FPR9K-SM36-TMC-3Y |
Cisco Firepower 9000 SM-36 Threat Defense Threat, Malware, and URL 3Yr Svc |
L-FPR9K-SM44-TMC= |
Cisco Firepower 9000 SM-44 Threat Defense Threat, Malware, and URL License |
L-FPR9K-SM44-TMC-3Y |
Cisco Firepower 9000 SM-44 Threat Defense Threat, Malware, and URL 3Yr Svc |
*Note: Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for details.
Find warranty information on cisco.com at the Product Warranties page.
Cisco offers a wide range of service programs to accelerate customer success. These innovative services programs are delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer satisfaction. Cisco Services help you protect your network investment, optimize network operations, and prepare your network for new applications to extend network intelligence and the power of your business. For more information about Cisco services for security, visit https://www.cisco.com/go/services/security.