Cisco Firepower 1000 Series

Cisco Firepower 1000 Series Data Sheet

Detailed performance specifications and feature highlights

Performance specifications and feature highlights for Cisco Firepower 1000 with the Threat Defense (FTD) image

Features

1010 / 1010E

1120

1140

1150

Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)

890 Mbps

2.3 Gbps

3.3 Gbps

5.3 Gbps

Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)

880 Mbps

2.3 Gbps

3.3 Gbps

4.9 Gbps

Maximum concurrent sessions, with AVC

100K

200K

400K

600K

Maximum new connections per second, with AVC

6K

15K

22K

28K

Transport Layer Security (TLS)

195 Mbps

850 Mbps

1.2 Gbps

1.4 Gbps

Throughput: IPS (1024B)

900 Mbps

2.6 Gbps

3.5 Gbps

6.1 Gbps

IPSec VPN throughput
(1024B TCP w/Fastpath)

400 Mbps

1.2 Gbps

1.4 Gbps

2.4 Gbps

Maximum VPN Peers

75

150

400

800

Cisco Device Manager (local management)

Yes

Yes

Yes

Yes

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Threat Defense Manager (FMC) or, alternatively, from the cloud with Cisco Defense Orchestrator

AVC

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open-source application detectors

Standard

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco IPS

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Malware Defense for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks.

Integrated threat correlation with Cisco AMP for Endpoints is also optionally available

Cisco Malware Analytics sandboxing

Available

URL filtering: number of categories

More than 80

URL filtering: number of URLs categorized

More than 280 million

Automated threat feed and IPS signature updates

Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos®group (https://www.cisco.com/c/en/us/products/security/talos.html)

Third-party and open- source ecosystem

Open API for integrations with third-party products; Snort®and OpenAppID community resources for new and specific threats

High availability and clustering

Active/standby

Cisco Trust Anchor Technologies

Cisco Firepower 1000 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details

Cisco Firepower 1000 Series Ordering information

Product number  Product description 
FPR1010-NGFW-K9 Cisco Firepower 1010 NGFW desktop appliance
FPR1010-ASA-K9 Cisco Firepower 1010 ASA desktop appliance
FPR1010E-NGFW-K9 Cisco Firepower 1010E NGFW desktop appliance
FPR1010E-ASA-K9 Cisco Firepower 1010E ASA desktop appliance
FPR1120-NGFW-K9 Cisco Firepower 1120 NGFW Appliance, 1U.
FPR1120-ASA-K9 Cisco Firepower 1120 ASA Appliance, 1U.
FPR1140-NGFW-K9 Cisco Firepower 1140 NGFW Appliance, 1U.
FPR1140-ASA-K9 Cisco Firepower 1140 ASA Appliance, 1U.
FPR1150-NGFW-K9 Cisco Firepower 1150 NGFW Appliance, 1U.
FPR1150-ASA-K9 Cisco Firepower 1150 ASA Appliance, 1U.

Cisco Firepower 1000 Series Licenses

Product   number  Product description 
F1010T-AC-PLS Cisco FPR1010 Anyconnect Plus License.
F1010T-CDO Cisco FPR1010 CDO License.
F1010T-SAL-C-LT Cisco FPR1010 SAL Cloud Logging and Troubleshooting License.
F1010T-TMC Cisco FPR1010 Threat Defense Threat, Malware, URL License.
L-FPR1010-SEC-PL= Cisco Firepower 1010 - Security Plus License.
L-FPR1010T-AMP= Cisco FPR1010 Threat Defense Malware Protection License.
L-FPR1010T-T= Cisco FPR1010 Threat Defense Threat Protection License.
L-FPR1010T-TC= Cisco FPR1010 Threat Defense Threat and URL License.
L-FPR1010T-TM= Cisco FPR1010 Threat Defense Threat and Malware License.
L-FPR1010T-TMC= Cisco FPR1010 Threat Defense Threat, Malware and URL License.
L-FPR1010T-URL= Cisco FPR1010 Threat Defense URL Filtering License.
FPR1120T-T Cisco FPR1120 Threat Defense Threat Protection License.
FPR1120T-TC Cisco FPR1120 Threat Defense Threat and URL License.
FPR1120T-TM Cisco FPR1120 Threat Defense Threat and Malware License.
FPR1120T-TMC Cisco FPR1120 Threat Defense Threat, Malware and URL License.
L-FPR1120T-AMP= Cisco FPR1120 Threat Defense Malware Protection License.
L-FPR1120T-T= Cisco FPR1120 Threat Defense Threat Protection License.
L-FPR1120T-TC= Cisco FPR1120 Threat Defense Threat and URL License.
L-FPR1120T-TM= Cisco FPR1120 Threat Defense Threat and Malware License.
L-FPR1120T-TMC= Cisco FPR1120 Threat Defense Threat, Malware and URL License.
L-FPR1120T-URL= Cisco FPR1120 Threat Defense URL Filtering License.
FPR1140T-T Cisco FPR1140 Threat Defense Threat Protection License.
FPR1140T-TC Cisco FPR1140 Threat Defense Threat and URL License.
FPR1140T-TM Cisco FPR1140 Threat Defense Threat and Malware License.
FPR1140T-TMC Cisco FPR1140 Threat Defense Threat, Malware and URL License.
L-FPR1140T-AMP= Cisco FPR1140 Threat Defense Malware Protection License.
L-FPR1140T-T= Cisco FPR1140 Threat Defense Threat Protection License.
L-FPR1140T-TC= Cisco FPR1140 Threat Defense Threat and URL License.
L-FPR1140T-TM= Cisco FPR1140 Threat Defense Threat and Malware License.
L-FPR1140T-TMC= Cisco FPR1140 Threat Defense Threat, Malware and URL License.
L-FPR1140T-URL= Cisco FPR1140 Threat Defense URL Filtering License.
L-FPR1150T-AMP= Cisco FPR1150 Threat Defense Malware Protection License.
L-FPR1150T-T= Cisco FPR1150 Threat Defense Threat Protection License.
L-FPR1150T-TC= Cisco FPR1150 Threat Defense Threat and URL License.
L-FPR1150T-TM= Cisco FPR1150 Threat Defense Threat and Malware License.
L-FPR1150T-TMC= Cisco FPR1150 Threat Defense Threat, Malware and URL License.
L-FPR1150T-URL= Cisco FPR1150 Threat Defense URL Filtering License.