Cisco Firepower 2120 NGFW 1U 3000Mbit/s hardware firewall

The Cisco Hardware Firewall Firewall Firepower is the leading next-generation firewall for protecting your network with its unified management and threat-focused approach

Take action now and get the industry's most advanced security solution to keep your organization safe and secure.

It uniquely provides advanced threat protection before, during, and after attacks.

Network operations teams must prioritize business resilience. Business resilience necessitates security.

If you're fighting a widespread breach, your network isn't really up—your IT environment isn't delivering customer value.

However, when it comes to next-generation firewalls (NGFWs), organizations are frequently forced to choose between network throughput performance and security.

Through superior threat defense, the Cisco Firepower FPR2120-NGFW-K9 appliances provide business resilience.

When threat inspection features are enabled, they provide sustained network performance to keep your business running securely. They are also easier to manage, resulting in increased IT efficiency and a lower total cost of ownership.

As threat services are added, the Firepower 2100 series NGFW maintains its throughput performance.

They accomplish this by incorporating a novel dual-multi-core CPU architecture that simultaneously optimizes firewall, cryptographic, and threat inspection functions.

Platform Image Support

The Cisco Firepower NGFW includes Application Visibility and Control (AVC), optional next-gen IPS (NGIPS), Cisco® Advanced Malware Protection (AMP) for Networks, and URL filtering.

The Cisco Firepower 2100 Series, 4100 Series, and 9300 appliances use the Cisco Firepower Threat Defense software image. Alternatively, Cisco Firepower 4100 Series and 9300 appliances can support the Cisco Adaptive Security Appliance (ASA) software image.

Management Options

Cisco Firepower NGFWs may be managed in a variety of ways depending on the way you work, your environment, and your needs.

The Cisco Firepower Management Center (which used to be called FireSIGHT) is a place where the Cisco Firepower NGFW, the Cisco Firepower NGIPS, and the Cisco AMP for Networks can all be managed from one place.

It also provides threat correlation for network sensors and Advanced Malware Protection (AMP) for endpoints.

The Cisco Firepower Device Manager can be used to manage locally devices from the 2100 Series and some from the 5500-X Series that run the Cisco Firepower Threat Defense software image.

The Cisco Adaptive Security Device Manager can be used to manage devices running the ASA software image that are part of the Cisco Firepower 4100 Series, Cisco Firepower 9300 Series, and Cisco ASA 5500-X Series.

Cisco Defense Orchestrator also has cloud-based management for consistent policy management across Cisco security devices running the ASA software image. This helps the distributed enterprise manage more efficiently.

Firepower DDoS Mitigation

On the Cisco Firepower 4100 Series and 9300 appliances, there is also DDoS mitigation that is tightly integrated, comprehensive, and based on behavior. This can protect both the network infrastructure and the application infrastructure.

This DDoS mitigation is Radware’s Virtual DefensePro (vDP). It is available from Cisco and is supported directly.

Cisco Firepower 2100 Series Appliances

The Cisco Firepower 2100 Series is a family of four threat-focused NGFW security platforms that deliver business resilience through superior threat defense.

It offers exceptional, sustained performance when advanced threat functions are enabled.

These platforms uniquely incorporate an innovative dual-multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously.

The throughput of the fhardware firewall Cisco in this series ranges from 1.9 Gbps to 8.5 Gbps, which covers use cases from the edge of the Internet to the data center.

Cisco Firepower 4100 Series Appliances

The Cisco Firepower 4100 Series is a family of four threat-focused NGFW security platforms. Their throughput ranges from 35 to 75 Gbps, addressing data center use cases. They deliver superior threat defense, at faster speeds, with a smaller footprint.

Cisco Firepower 9300 Security Appliance

The Cisco Firepower 9300 is a carrier-grade, modular platform that is scalable (beyond 1 Tbps when clustered) and designed for service providers, high-performance computing centers, large data centers, campuses, high-frequency trading environments, and other places that need low offload latency (less than 5 microseconds) and high throughput.

Flow-offloading, programmatic orchestration, and the management of security services with RESTful APIs are all possible with the Cisco Firepower 9300.

It is also available in Network Equipment Building Standards (NEBS)-compliant configurations.

Cisco ASA 5500-FTD-X Series Appliances

The Cisco ASA 5500-FTD-X Series is a family of eight threat-focused NGFW security platforms.

Their throughput ranges from 750 Mbps to 4 Gbps, addressing use cases from the small office or branch office to the Internet edge.

They provide superior threat defense in a small footprint.

Cisco Firepower NGFW Virtual (NGFWv) Appliances

Cisco Firepower NGFWv can be used in virtual, public, private, and hybrid cloud environments on VMware, KVM, Amazon Web Services (AWS), and Microsoft Azure.

With Firepower NGFWv, organizations using SDN can quickly provision and orchestrate flexible network protection.

Organizations that use NFV can also save money by deploying Firepower NGFWv.