Network Security & Firewalls

Simplified Management and Strong Threat Prevention for Small Offices

The Cisco Firepower 1000 Series firewalls are designed for smaller offices and branch offices. With simplified management via Cisco Defense Orchestrator, they enable resiliency and threat protection for your organization. Unlike many competing firewalls, Firepower sustains performance while performing threat inspection. Beyond manageability and performance, only Cisco provides a comprehensive and open platform approach to security. Cisco's security platform future-proofs your security investment and simplifies control, inspection, and visibility across your network. Three core components form the Cisco firewalling platform for SMBs:

• Cisco Defense Orchestrator (CDO)
• Cisco Threat Response (CTR)
• Cisco SecureX

In addition to simplifying firewall management, CDO automates the deconfliction of overlapping and shadow security policies. And CDO extends beyond the firewall, even enabling management of security group rules for your Amazon Web Services (AWS) VPC Images. The second and third elements of the Cisco security platform, CTR and SecureX, are free for Cisco firewall customers. CTR is a SecureX application. They feature an open API for integration with other vendors' security solutions. CTR correlates threats with automated integration across Cisco firewalls and other security tools, including Cisco Umbrella for cloud security, and Cisco AMP for Endpoints. SecureX takes the platform further, connecting your entire network, endpoint, cloud, and application security infrastructure. SecureX unifies visibility across your security infrastructure and also automates critical security workflows.

Highlights

• Cisco Firepower 1000 Series supports Cisco Cisco Adaptive Security Appliance (ASA) & Cisco Firepower Threat Defense (FTD) software images
• CDO manages both ASA and FTD images
• CDO upgrades your firewalls with one-touch
• 3X greater throughput than the prior generation
• Supported Features on Cisco Firepower Threat Defense (FTD) Software ImageAutomated daily threat intelligence updates from Cisco Talos
• Layer 7 application firewalling
• Network traffic and content inspection, with Cisco's NGIPS (Next-Generation IPS) and AMP (Advanced Malware Protection) for Networks
• URL filtering
• Site-to-site and remote access VPN

Cisco Firepower 2100 Series appliances

The Cisco Firepower 2100 Series is a family of four threat-focused security platforms that deliver business resiliency and superior threat defense. They offers exceptional sustained performance when advanced threat functions are enabled. These platforms uniquely incorporate an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions. The series' firewall throughput range addresses use cases from the Internet edge to the data center. Network Equipment Building Standards (NEBS)- compliance is supported by the Cisco Firepower 2130 platform. 2100 Series platforms run either the Cisco Secure Firewall ASA or Threat Defense (FMC) software. They can be deployed in both firewall and dedicated IPS modes.

Cisco Firepower 2100 Series appliances

The Cisco Firepower 2100 Series is a family of four threat-focused security platforms that deliver business resiliency and superior threat defense. They offers exceptional sustained performance when advanced threat functions are enabled. These platforms uniquely incorporate an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions. The series' firewall throughput range addresses use cases from the Internet edge to the data center. Network Equipment Building Standards (NEBS)- compliance is supported by the Cisco Firepower 2130 platform. 2100 Series platforms run either the Cisco Secure Firewall ASA or Threat Defense (FMC) software. They can be deployed in both firewall and dedicated IPS modes.

Cisco Firepower 2100 Series appliances

The Cisco Firepower 2100 Series is a family of four threat-focused security platforms that deliver business resiliency and superior threat defense. They offers exceptional sustained performance when advanced threat functions are enabled. These platforms uniquely incorporate an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions. The series' firewall throughput range addresses use cases from the Internet edge to the data center. Network Equipment Building Standards (NEBS)- compliance is supported by the Cisco Firepower 2130 platform. 2100 Series platforms run either the Cisco Secure Firewall ASA or Threat Defense (FMC) software. They can be deployed in both firewall and dedicated IPS modes.

Superior business resiliency and protection

Gain business resiliency through superior security with sustained performance. The Firepower 2100 Series has an innovative dual multicore CPU architecture that optimizes firewall, cryptographic, and threat inspection functions simultaneously. Now, achieving security doesn't come at the expense of network performance.

Features and benefits

Threat-focused NGFW

Improve business resiliency and maintain performance with superior threat defense. Apply granular application control. Protect against malware. Shrink time to detection and remediation. Reduce complexity with the on-device management interface.

Optimized performance and port density

Firewall throughput speeds from 2 Gbps to 8.5 Gbps. Support for sixteen (16) 1 GE ports on the low-end models. The high-end models support up to twenty-four (24) 1 GE ports or up to twelve (12) 10 GE ports. All in a 1RU form factor.

Innovative architecture

With its unique dual-CPU, multicore architecture, the 2100 maintains throughput performance when threat inspection is activated by routing different workloads to different chips. And enabling the threat protection features does not affect the firewall throughput.

Integration adds value

Further strengthen your defenses. Share intelligence, context, and policy controls by integration with third-party and other Cisco security solutions. Enable automatic device quarantining and rapid threat containment with Cisco ISE.

Management to meet your needs

Cisco Firepower NGFW is now even less time-consuming to configure and less costly to manage. You can choose from local, centralized, and cloud-based managers that fit your environment and the way you work.