Network Security & Firewalls

Integrated Network Threat Appliances

Cisco Firepower NGIPS delivers deep visibility, preeminent security intelligence and superior advanced threat protection to secure today's complex IT environments

Product Overview

Cisco Firepower Next-Generation IPS (NGIPS) threat appliances provide network visibility, security intelligence, automation and advanced threat protection. It uses industry-leading intrusion prevention capabilities and multiple techniques to detect even the most sophisticated network attacks and protect you against them.

Cisco Firepower NGIPS continuously discovers information about your network environment, including data about operating systems, mobile devices, files, applications and users. It then uses this information to build network maps and host profiles. This gives you the contextual information you need to make better decisions about intrusion events. And this information is also used as input to better enable the automation of key threat protection features.

Cisco's Talos Security Intelligence and Research Group collects and correlates threats in real time using the largest threat detection network in the world. Their efforts result in vulnerability-focused IPS rules and embedded IP-, URL-, and DNS-based security intelligence for Firepower NGIPS.

Security automation correlates intrusion events with your network's vulnerabilities so you can focus on the threats that matter most. It also analyzes your network's weaknesses and recommends the appropriate security policies to put in place.

Cisco Firepower NGIPS threat appliances provide industry leading threat effectiveness against both known and unknown threats. Features include:

• IPS rules that identify and block attack traffic that target vulnerabilities in your network
• Tightly integrated defense against advanced malware incorporating advanced analysis of network and endpoint activity
• Sandboxing technology that uses hundreds of behavioral indicators to identify zero-day and evasive attacks

The Cisco Secure Firewall 4200 Series is a high-end firewall designed to meet the security requirements of large enterprises, datacenters, and service providers. It is available in three different performance models, offering a wide range of options while providing superior threat defense within a compact 1 RU form factor. Key features and benefits of the appliance include:

• Cryptographic acceleration architecture preserves performance with SSL and VPN decryption
• Save space and energy with 1RU form factor
• Future-proof your investment with 8x node cluster
• Flexibility of 2x interface module bays for additional interface support
• Customize and future-proof investment up to 200G interfaces
• 2x SSD for event storage and malware analysis
• Uptime/resilience with dual management interfaces
• Fail-to-wire network modules, further enhancing its reliability and fault tolerance

These platforms can be deployed in both firewall and dedicated IPS modes, providing versatile deployment options. For inline sets and passive interfaces, the 4200 Series supports Q-in-Q (stacked VLAN) with the ability to handle up to two 802.1Q headers in a packet.

Cisco Secure Firewall 4200 Series appliances

The Cisco Secure Firewall 4200 Series is a high-end firewall designed to meet the security requirements of large enterprises, datacenters, and service providers. It is available in three different performance models, offering a wide range of options while providing superior threat defense within a compact 1 RU form factor. Key features and benefits of the appliance include:

• Cryptographic acceleration architecture preserves performance with SSL and VPN decryption
• Save space and energy with 1RU form factor
• Future-proof your investment with 8x node cluster
• Flexibility of 2x interface module bays for additional interface support
• Customize and future-proof investment up to 200G interfaces
• 2x SSD for event storage and malware analysis
• Uptime/resilience with dual management interfaces
• Fail-to-wire network modules, further enhancing its reliability and fault tolerance

These platforms can be deployed in both firewall and dedicated IPS modes, providing versatile deployment options. For inline sets and passive interfaces, the 4200 Series supports Q-in-Q (stacked VLAN) with the ability to handle up to two 802.1Q headers in a packet.

Cisco Secure Firewall 4200 Series appliances

The Cisco Secure Firewall 4200 Series is a high-end firewall designed to meet the security requirements of large enterprises, datacenters, and service providers. It is available in three different performance models, offering a wide range of options while providing superior threat defense within a compact 1 RU form factor. Key features and benefits of the appliance include:

• Cryptographic acceleration architecture preserves performance with SSL and VPN decryption
• Save space and energy with 1RU form factor
• Future-proof your investment with 8x node cluster
• Flexibility of 2x interface module bays for additional interface support
• Customize and future-proof investment up to 200G interfaces
• 2x SSD for event storage and malware analysis
• Uptime/resilience with dual management interfaces
• Fail-to-wire network modules, further enhancing its reliability and fault tolerance

These platforms can be deployed in both firewall and dedicated IPS modes, providing versatile deployment options. For inline sets and passive interfaces, the 4200 Series supports Q-in-Q (stacked VLAN) with the ability to handle up to two 802.1Q headers in a packet.

The Cisco Secure Firewall 4200 Series is a high-end firewall designed to meet the security requirements of large enterprises, datacenters, and service providers. It is available in three different performance models, offering a wide range of options while providing superior threat defense within a compact 1 RU form factor. Key features and benefits of the appliance include:

• Cryptographic acceleration architecture preserves performance with SSL and VPN decryption
• Save space and energy with 1RU form factor
• Future-proof your investment with 8x node cluster
• Flexibility of 2x interface module bays for additional interface support
• Customize and future-proof investment up to 200G interfaces
• 2x SSD for event storage and malware analysis
• Uptime/resilience with dual management interfaces
• Fail-to-wire network modules, further enhancing its reliability and fault tolerance

These platforms can be deployed in both firewall and dedicated IPS modes, providing versatile deployment options. For inline sets and passive interfaces, the 4200 Series supports Q-in-Q (stacked VLAN) with the ability to handle up to two 802.1Q headers in a packet.