Cisco Firepower 1000 Series Appliances

product introduction

Cisco Equipment Series 1000 includes four new generation firewall models (NGFW) that provide small business defenses with superior defense technologies. These devices offer exceptional performance despite the activation of advanced defense capabilities. With the operational power that the models of this series offer, this series can be used in small offices and remote branches. The 1000 series is capable of running Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) software.

Product Specifications

Model	NGFW	Next-Generation Intrusion Prevention System (NGIPS)	Interfaces
FPR-1010	650 Mbps	650 Mbps	8 x RJ45
FPR-1120	1.5 Gbps	1.5 Gbps	8 x RJ45, 4 x SFP
FPR-1140	2.2 Gbps	2.2 Gbps	8 x RJ45, 4 x SFP
FPR-1150	3 Gbps	3 Gbps	8 x RJ45, 2 x SFP, 2 x 10G SFP+

Equipment performance with FTD software

Features	1010	1120	1140	1150
Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)	650 Mbps	1.5 Gbps	2.2 Gbps	3 Gbps
Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)	650 Mbps	1.5 Gbps	2.2 Gbps	3 Gbps
Maximum concurrent sessions, with AVC	100K	200K	400K	600K
Maximum new connections per second, with AVC	6K	15K	22K	28K
Transport Layer Security (TLS)	150 Mbps	700 Mbps	1 Gbps	1.4 Gbps
Throughput: NGIPS (1024B)	650 Mbps	1.5 Gbps	2.2 Gbps	3 Gbps
IPSec VPN throughput (1024B TCP w/Fastpath)	300 Mbps	1 Gbps	1.2 Gbps	1.4 Gbps
Maximum VPN Peers	75	150	400	800
Cisco Firepower Device Manager (local management)	Yes	Yes	Yes	Yes
Centralized management	Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator
AVC	Standard, supporting more than 4000 applications, as well as geolocations, users, and websites
AVC: OpenAppID support for custom, open-source application detectors	Standard
Cisco Security Intelligence	Standard, with IP, URL, and DNS threat intelligence
Cisco Firepower NGIPS	Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
Cisco Advanced Malware Protection (AMP) for Networks	Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally available
Cisco AMP Threat Grid sandboxing	Available
URL filtering: number of categories	More than 80
URL filtering: number of URLs categorized	More than 280 million
Automated threat feed and IPS signature updates	Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos^® group (https://www.cisco.com/c/en/us/products/security/talos.html)
Third-party and open-source ecosystem	Open API for integrations with third-party products; Snort^® and OpenAppID community resources for new and specific threats
High availability and clustering	Active/standby
Cisco Trust Anchor Technologies	Cisco Firepower 1000 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details

Equipment performance with ASA software

Features	1010	1120	1140	1150
Stateful inspection firewall throughput1	2 Gbps	4.5 Gbps	6 Gbps	7.5 Gbps
Stateful inspection firewall throughput (multiprotocol)2	1.4 Gbps	2.5 Gbps	3.5 Gbps	4.5 Gbps
Concurrent firewall connections	100,000	200,000	400,000	600,000
Firewall latency (UDP 64B microseconds)	–	–	–	–
New connections per second	25,000	75,000	100,000	150,000
IPsec VPN throughput (450B UDP L2L test)	500 Mbps	1 Gbps	1.2 Gbps	1.7 Gbps
Maximum VPN Peers	75	150	400	800
Security contexts (included; maximum)	NA	2; 5	2; 5	2; 25
High availability	Active/standby	Active/active and Active/standby	Active/active and Active/standby	Active/active and Active/standby
Clustering		–
Scalability		VPN Load Balancing
Centralized management		Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator
Adaptive Security Device Manager		Web-based, local management for small-scale deployments

Cisco Firepower 1000 Series Appliances

Related products

Cisco Switch Catalyst 9300

Cisco Switch Catalyst 9200

Cisco Switch 3850

Cisco Switch 2960X/XR

Cisco Switch Catalyst 9500

Cisco Switch Catalyst 9400

Cisco Firepower 9300 Series Appliances

Contact us

Latest Articles

Last News

Related Links