Features

1120

Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)

1.5 Gbps

Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)

1.5 Gbps

Maximum concurrent sessions, with AVC

200K

Maximum new connections per second, with AVC

15K

Transport Layer Security (TLS)

700 Mbps

Throughput: NGIPS (1024B)

1.5 Gbps

IPSec VPN throughput (1024B TCP w/Fastpath)

1 Gbps

Maximum VPN Peers

150

Cisco Firepower Device Manager (local management)

Yes

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator

AVC

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open-source application detectors

Standard

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco Firepower NGIPS

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Advanced Malware Protection (AMP) for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally available.

Cisco AMP Threat Grid sandboxing

Available

URL filtering: number of categories

More than 80

URL filtering: number of URLs categorized

More than 280 million