Regístrese ahora para una mejor cotización personalizada!
Cisco Firepower® 9300 is a scalable (beyond 1 Tbps when clustered), carrier-grade, modular platform designed for service providers, high-performance computing centers, large data centers, campuses, high-frequency trading environments, and other point in network requiring low (less than 5-microsecond offload) latency and exceptional throughput. Firepower 9300 supports flow-offloading, programmatic orchestration, and the management of security services with RESTful APIs. The appliance uses AI/ML to detect anomalies, remediate threats, and optimize firewall policy for peak performance. NetOps and SecOps operations are streamlined using the multi-threaded Snort 3 engine, while admins benefit from natural language interactions using the AI chatbot for guidance, troubleshooting, and policy configuration. The appliance is SD-WAN capable and allows for simplified site-to-site communication using on-demand tunnels and dynamic application path selection across multiple WAN interfaces. Firepower 9300 is also available in Network Equipment Building estándars («Neb)-compliant configurations. The 9300 Series runs either the Cisco Secure Firewall de seguridad ASA or Threat Defense (FTD) software.
Cisco Firepower 9300 Series summary
Model | Firewall | NGFW | Sistema de prevención de intrusión de próxima generación (NGIPS) | Interfaces | Optional interfaces |
SM-40 | 80G | 55G | 60G | 8 x SFP+ on-chassis | 2 x NMs: 1/10/40/100G, FTW |
SM-48 | 80G | 65G | 68G | 8 x SFP+ on-chassis | 2 x NMs: 1/10/40/100G, FTW |
SM-56 | 80G | 68G | 73G | 8 x SFP+ on-chassis | 2 x NMs: 1/10/40/100G, FTW |
SM-56 x 3 | 235G | 190G | 190G | 8 x SFP+ on-chassis | 2 x NMs: 1/10/40/100G, FTW |
Table 1. Performance specifications and feature highlights for Cisco Firepower 9300 with the Cisco Threat Defense (FTD) image
características | SM-40 | SM-48 | SM-56 | 3 x SM-56 |
Rendimiento: Firewall (FW) + visibilidad y Control de la aplicación (El CVA) (1024B) | 55 Gbps | 65 Gbps | 70 Gbps | 190 Gbps |
Throughput: FW + AVC + Intrusion Prevention System (IPS (1024B) | 55 Gbps | 65 Gbps | 68 Gbps | 190 Gbps |
Máximo de sesiones simultáneas, con CVA | 35 million | 35 million | 35 million | 60 million |
Máximo de nuevas conexiones por segundo, con AVC | 380K | 450K | 490K | 1.1M |
TLS (Hardware Decryption)2 | 10 Gbps | 11 Gbps | 12 Gbps | 28 Gbps |
Rendimiento: NGIPS (1024B) | 60 Gbps | 68 Gbps | 73 Gbps | 190 Gbps |
IPSec VPN throughput (1024B TCP /Fastpath) | 27 Gbps | 33 Gbps | 36 Gbps | 110 Gbps1 |
Máximo de pares VPN | 20.000 | 20.000 | 20.000 | 60,000 |
Gestión centralizada | La configuración centralizada, el registro, la supervisión y la presentación de informes se llevan a cabo por el centro de gestión o, alternativamente, en la nube con Cisco Defense Orchestrator | |||
AVC | Estándar, soporta más de 4000 aplicaciones, así como geoubicaciones, usuarios y sitios web | |||
AVC: OpenAppID support for custom, open-source Application detectores | Standard | |||
Inteligencia de seguridad Cisco | Estándar, con IP, URL y DNS inteligencia de amenazas | |||
Cisco IPS License | Disponible; ¿Puede pasivamente detectar puntos finales e infraestructura para correlación de amenazas e indicadores de inteligencia de compromiso (IoC) | |||
Cisco Malware Defense for Networks | disponible; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available | |||
Cisco Malware Analytics | Available | |||
Filtrado de URL: número de categorías | More than 120 | |||
Filtrado de URL: número de URL categorizadas | Más de 280 millones | |||
Automated threat feed and IPS signature updates (en inglés) | Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos® group (https://www.cisco.com/c/en/us/products/security/talos.html) | |||
Third-party and open- source ecosystem | Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats | |||
Alta disponibilidad y agrup. | Active/active (with clustering) and Active/standby; up to 6 modules across up to 6 different Firepower 9300 chassis. | |||
Cisco Trust Anchor Technologies (en inglés) | Cisco Firepower 9300 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. | |||
Note: Performance varies depending on features activated, network traffic protocol mix, and packet size. Performance is subject to change with new software releases. Consult your Cisco rep for sizing guidance.
1 In unclustered configuration.2 Throughput measured with 50% TLS 1.2 traffic with AES256-SHA with RSA 2048B keys.
Table 2. ASA software performance and capabilities on Cisco Firepower 9300
características | SM-40 | SM-48 | SM-56 | 3 x SM-56 |
Stateful inspection firewall throughput1 | 80 Gbps | 80 Gbps | 80 Gbps | 235 Gbps |
Stateful inspection firewall throughput (multiprotocol)2 | 55 Gbps | 60 Gbps | 64 Gbps | 172 Gbps |
Conexiones simultáde firewall | 55 million | 60 million | 60million | 195 million |
Firewall latency | 3.5 | 3.5 | 3.5 | 3.5 |
Nuevas conexiones por segundo | 1.6 million | 1.8 million | 2 millones | 4.75 million |
IPsec VPN throughput | 25 Gbps | 27 Gbps | 30 Gbps | 74 Gbps |
Máximo de pares VPN | 20.000 | 20.000 | 20.000 | 60,000 |
Contextos de seguridad (incluidos; (máximo) | 10; 250 | |||
Alta disponibilidad | Activo/activo y activo /standby | |||
Clustering | Up to 16 security modules across up to 16 different Firepower 9300 chassis | |||
escalabilidad | VPN load balancing, firewall clustering | |||
Gestión centralizada | La configuración centralizada, el registro, la supervisión y los informes son realizados por Cisco Security Manager o, alternativamente, en la nube con Cisco Defense Orchestrator | |||
Administrador de dispositivos de seguridad adaptativa | Gestión local basada en la web para despliede a pequeña escala | |||
1 Throughput measured with 1500B User Datagram Protocol (UDP) traffic measured under ideal test conditions.2 “Multiprotocol” refers to a traffic profile consisting primarily of TCP-based protocols and applications like HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS.
Table 3. Cisco Firepower 9300 Series hardware specifications
especificación | descripción | |||
Dimensiones (H x W x D) | 5.25 x 17.5 x 32 in. (13.3 x 44.5 x 81.3 cm) | |||
El factor de la forma | 3 Rack Units (3RU), fits standard 19-in. (48.3-cm) square-hole rack | |||
Security module slots | 3 | |||
Network module slots | 2 (within supervisor) | |||
Supervisor | Cisco Firepower 9000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 network module slots for I/O expansion | |||
Security modules | ● Cisco Firepower 9000 Security Module 40 with 2 x SSDs in RAID-1 configuration● Cisco Firepower 9000 Security Module 48 with 2 x SSDs in RAID-1 configuration● Cisco Firepower 9000 Security Module 56 with 2 x SSDs in RAID-1 configuration | |||
Módulos de red | ● 8 x 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) network modules● 4 x 40 Gigabit Ethernet Quad SFP+ network modules● 2 x 100 Gigabit Ethernet Quad SFP28 network modules● 4 x 100 Gigabit Ethernet Quad SFP28 network modules● 6-port 10Gbps SR Fiber FTW (fail to wire) Network Module● 6-port 10Gbps LR Fiber FTW (fail to wire) Network Module● 2-port 40Gbps SR FTW (fail to wire) Network Module Note: Cisco Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for details. | |||
Número máximo de interfaces | Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules; up to 8 x 100 Gigabit Ethernet interfaces with two network modules; up to 24 x 1 Gigabit Ethernet ports(SFP) with network modules and fixed ports | |||
Puertos de gestión integrada de redes | 1 x Gigabit Ethernet copper port (on supervisor) | |||
Puerto serie | 1 x consola RJ-45 | |||
USB | 1 x USB 2.0 | |||
Almacenamiento de almacenamiento | Up to 4.8 TB per chassis (1.6 TB per security module in RAID-1 configuration) | |||
Fuentes de alimentación eléctrica | Fuente de alimentación de corriente alter | -48V DC power supply | HVDC power supply | |
Tensión de entrada | 200 to 240V AC | -40V to -60V DC* | 240 to 380V DC | |
Máxima corriente de entrada | 15.5A to 12.9A | 69A to 42A | <14A at 200V | |
Potencia de salida máxima | 2,500W | 2,500W | 2,500W | |
frecuencia | 50 a 60 Hz | - | - | |
Efficiency (at 50% load) | 92% | 92% | 92% (at 50% load) | |
redundredundredund | 1+1 | |||
Los aficionados | 4 hot-swappable fans | |||
ruido | 75.5 dBA at maximum fan speed | |||
Montaje en Rack | Yes, mount rails included (4-post EIA-310-D rack) | |||
peso | 105 lb (47.7 kg) with one security module; 135 lb (61.2 kg) fully configured | |||
Temperature: standard operating | Up to 10,000 ft (3000 M): 32 to 104°F (0 to 40°C) for SM-40 module 32 to 104°F (0 to 40°C) for SM-48 module at sea level Altitude adjustment notes: For SM-56, maximum temp is 35°C, for every 1000 feet above sea level subtract 1°C | |||
Temperature: NEBS operating | Long term: 0 to 45°C, up to 6,000 ft (1829 m) Long term: 0 to 35°C, 6,000 to 13,000 ft (1829-3964 m) Short term: -5 to 55°C, up to 6,000 ft (1829 m) Note: Firepower 9300 NEBS compliance applies only to SM-40 and SM-48 configurations. | |||
Temperatura: no funciona | -40 to 149°F (-40 to 65°C); maximum altitude is 40,000 ft | |||
Humedad: funcionamiento | 5 a 95% sin condensación | |||
Humedad: no operativo | 5 a 95% sin condensación | |||
Altitud: operativo | SM-40, SM-48: 0 to 13,000 ft (3962 m) SM-56: 0 to 10,000 ft (3048 m); please see above Operating Temperature section for temperature adjustment notes | |||
Altitud: no operativo | 40,000 ft (12,192 m) | |||
* Minimum turn-on voltage is -44V DC.
Table 4. Cisco Firepower 9300 Series NEBS, regulatory, safety, and EMC compliance
especificación | descripción |
NEBS | Cisco Firepower 9300 is NEBS compliant with SM-40 and SM-48 Security Modules |
Cumplimiento normativo | Products comply with CE markings per directives 2004/108/EC and 2006/108/EC |
seguridad | ● UL 60950-1● CAN/CSA-C22.2 No. 60950-1● EN 60950-1● IEC 60950-1● AS/NZS 60950-1● GB4943 |
EMC: emisiones | ● 47CFR Part 15 (CFR 47) Class A (FCC Class A)● AS/NZS CISPR22 Class A● CISPR22 CLASS A● EN55022 Class A● ICES003 Class A● VCCI Class A● EN61000-3-2● EN61000-3-3● KN22 Class A● CNS13438 Class A● EN300386● TCVN7189 |
EMC: inmunidad | ● EN55024● CISPR24● EN300386● KN24● TVCN 7317● EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6, EN-61000-4-8, EN61000-4-11 |
Flexible payment solutions to help you achieve your objectives
Cisco Capital® makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.
For more datasheets, please go to the Download tab on each product details page, or search in the Datasheet Download Center.
Cisco Firepower Series Firewalls
For Cisco product list and quote, please visit: https://www.hi-network.com/categories/cisco or contact us at www.hi-network.com (Email: [email protected] (en inglés))
Etiquetas calientes:
cisco firewall
Regístrepor correo electrónico ahora para acciones semanales de promoción
100% free, Unsubscribe any time!
Add 1: Room 605 6/F FA YUEN Commercial Building, 75-77 FA YUEN Street, Mongkok KL, HongKong Add 2: Room 405, Building E, MeiDu Building, Gong Shu District, Hangzhou City, Zhejiang Province, China
Whatsapp/Tel: +8618057156223 Tel: 0086 571 86729517 Tel en Hong Kong: 00852 66181601
Correo electrónico: [email protected]
English
Pусский
Français
Español
Português
