Cisco is a long-time leader in delivering state-of-the-art firewalls for the widest possible range of deployments. Cisco's Firepower Next Generation Firewall (NGFW) security appliances represent a modern firewall platform that marshals dedicated hardware, cloud-based services, and machine learning to block, identify, and respond to threats automatically. Progent's Cisco-certified CCIE-certified firewall experts can help you to design and execute a smooth upgrade to Firepower firewalls from Cisco's from ASA 5500-X, ASA 5500, or PIX appliances and help you enhance Firepower appliances with Cisco's cloud-based services to create and centrally control network environments that span branch offices, data centers, and cloud resources. Progent's firewall consultants can also help you to maintain and troubleshoot older-generation Cisco security appliances. Progent's certified cybersecurity experts can help you with policy creation based on industry best practices so you can build a consistent cybersecurity posture that applies to all your networked devices at any location.

Cisco's Firepower NGFW Firewall Appliances
Cisco's portfolio of Firepower Next-Generation Firewalls offer advanced protection and centralized management at prices, performance levels, and expandability to fit deployments spanning telecommuters and small businesses to global enterprises and Internet service providers. Cisco's Firepower NGFW appliances deliver a significant performance improvement compared to Cisco's previous-generation firewalls and include centralized control of advanced security features such as application visibility and control (AVC), next-generation intrusion protection (NGIPS) with intelligent prioritization of risks, advanced malware protection (AMP), URL filtering, and multi-node sandboxing.

All Firepower Next-Generation firewalls have a one-pass architecture and permit uninterrupted analysis and retrospective identification, which allows the firewalls to initiate outbreak controls and to uncover patient zero. Firepower Next-Generation firewalls also have the option of URL Filtering and sandboxing for detecting evasive and sandbox-aware malware, IoCs, and malware artifacts. NGIPS rule tuning and network firewall policy can be performed automatically, eliminating the need for manual intervention by IT security specialists. All Firepower NGFW firewalls give you the option of running either Firepower Threat Defense (FTD) or Cisco Adaptive Security Appliance (ASA) software. Centralized deployment, logging, system monitoring, and reporting functions can be controlled either via Cisco's Management Center or in the cloud with Cisco Defense Orchestrator.

Cisco Firepower 1000 Series Next-Generation Firewalls
Cisco Firepower Next-Generation 1000 Series Firewalls ConsultantsFirepower NGFW 1000 Series Firewalls are intended for small businesses, home offices, or branches. Devices in this family deliver improved value vs. corresponding Cisco ASA models, delivering 4-6X faster firewall speed. Local management can be performed using Cisco Firepower Device Manager. 1000 Series appliances include a built-in 10M/100M/1GBASE-T RJ-45 Ethernet interface for network management, an RJ-45 console port, a USB 3.0 Type-A port, and 200 Gbytes of storage. Active/active and Active/standby high availability is supported as well as virtual private network load balancing.

Cisco's Firepower 1010 model is a desktop or wall-mount, fanless appliance that offers 890 Mbps performance, Application Visibility/Control, and Next Generation Intrusion Prevention System. The unit comes with eight built-in RJ-45 I/O interfaces, two of them with POE+. IPsec VPN performance is 400 Mbps and the unit allows 100K simultaneous sessions, 6,000 new connections per second, and a maximum of 75 VPN peers. The Firepower 1120 firewall is a 1RU appliance that delivers firewall performance of 2.3 Gbps. The appliance comes with eight RJ45 built-in I/O interfaces and four SFP interfaces. IPsec VPN performance is 1.2 Gbps and the firewall allows 200K simultaneous sessions, 15,000 new connections/second with Application Visibility/Control (AVC), and a maximum of 150 VPN peers.

The Firepower 1140 model firewall is a 1RU device that delivers firewall performance of 3.3 Gbps. The unit comes with 8 built-in RJ-45 ports and four SFP interface ports. IPsec VPN throughput is 1.4 Gbps and the device allows 400K concurrent sessions, 22K new connections/second with Application Visibility/Control, and as many as 400 VPN peers. The Firepower 1150 model firewall is a 1RU rackmount appliance that delivers firewall performance of 5.3 Gbps. The appliance features eight integrated RJ-45 interface ports, two SFP interfaces, and two 10G SFP+ interfaces. IPsec VPN throughput is 2.4 Gbps and the firewall supports 600K simultaneous sessions, 28,000 new connections/second, and up to 800 VPN peers.

Cisco Firepower 2100 Series Next-Generation Firewalls
Cisco Firepower 2100 Series Next-Generation Firewalls ConsultingCisco's Firepower 2100 Series NGFW Firewalls are 1RU rack appliances designed for deployment at the Internet edge. Devices in this family have a dual multicore processor design that enables them to offer 3-6X higher throughput than Cisco ASA 5545-X to ASA 5555-X models they are designed to succeed. Local management can be done with Cisco Firepower Device Manager. All Firepower 2100 Series Next-Generation Firewalls include 12 RJ45 interfaces and four SFP interfaces. These units include one integrated 10/100/1000 RJ-45 Ethernet port for management, an RJ-45 console port, and one USB 2.0 Type-A port. High availability is supported along with VPN load balancing.

Cisco's Firepower 2110 model firewall has 4 built-in 1 Gigabit SFP Ethernet interfaces and 100 GB of storage. The 2110 offers 2.6 Gbps firewall performance and 800 Mbps IPsec VPN throughput and allows 1 million simultaneous sessions, 18,000 new connections per second, and a maximum of 1,500 VPN peers. Cisco's Firepower 2120 model firewall comes with 12 integrated 10M/100M/1GBASE-T Ethernet RJ-45 interfaces, four built-in 1G SFP Ethernet interface ports, and 100 GB of storage. The 2120 delivers 3.4 Gbps firewall throughput and 1 Gbps IPsec VPN throughput and permits 1.5 million concurrent sessions, 28,000 new connections per second and as many as 3,500 VPN peers.

Cisco's Firepower 2130 firewall includes four integrated 10 Gigabit SFP+ ports and 200 GB of storage. The unit also accepts a network module with eight additional interfaces. The Firepower 2130 delivers 5.4 Gbps firewall performance and 1.9 Gbps IPsec VPN performance and allows two million simultaneous sessions, 30,000 new connections per second, and a maximum of 7,500 VPN peers. Cisco's high-end Firepower 2140 firewall comes with four integrated 10 Gigabit SFP+ ports and 200 GB of storage. The unit also accepts a network module with 8 extra interface ports for a maximum of 24 Ethernet interfaces. The 2140 delivers 10.4 Gbps firewall performance and 3.6 1Gbps IPsec VPN throughput and supports 3 million simultaneous, 57,000 new connections per second, and up to 10,000 VPN peers. Both the 2130 and 2140 units have the option of redundant AC or DC power supplies.

Cisco 3100 Firewall Series
Cisco Firewall 3100 Series ExpertsCisco's 3100 Firewall Series models are modular 1RU rack devices intended for enterprises who require throughput, high port count, and zero-trust security at the Internet edge, the corporate data center, or a private cloud. For high uptime, all Secure Firewall 3100 Series appliances allow 8-chassis clustering and operate in either Active/active or Active/standby mode. The appliances can run Cisco's ASA or Firewall Threat Defense (FTD) software. Built-in I/O for each device includes 8 10M/100M/1GBASE-T Ethernet interfaces (RJ-45) and 8 1/10 Gigabit (SFP) Ethernet ports. Available network modules support 1/10/25/40G options and all versions come with 900 GB of storage as well as an additional storage expansion slot.

Cisco's 3105 Firewall device offers 10 Gbps firewall performance and 5.5 Gbps IPsec VPN throughput. The 3105 allows 1.5 million concurrent sessions, 90,000 new connections/second, and up to 2,000 VPN peers. Cisco's 3110 Firewall model delivers 10 Gbps firewall performance and 8 Gbps IPsec VPN performance. The 3110 supports 2 million simultaneous sessions, 130,000 new connections/second, and a maximum of 3,000 VPN peers. Cisco's 3120 Firewall device offers 21 Gbps firewall throughput and 10 Gbps IPsec VPN performance. The 3120 firewall allows 4 million simultaneous sessions, 170,000 new connections/second, and as many as 7,000 VPN peers. Cisco's 3130 Firewall device delivers 42 Gbps firewall throughput and up to 14 Gbps IPsec VPN performance. The 3130 allows 6 million simultaneous sessions, 200K new connections/second, and up to 15,000 VPN peers. The 3130 model includes eight 1/10/25G SFP+ ports. Cisco's Secure Firewall 3140 appliance delivers 49 Gbps firewall performance and up to 17 Gbps IPsec VPN performance. The 3140 supports 10 million simultaneous sessions, 200K new connections per second, and a maximum of 20K VPN peers. The 3140 includes eight 1/10/25G SFP+ ports.

Cisco Firepower 4100 Series NGFW Firewalls
Cisco Firepower 4100 Series Next-Generation Firewalls ConsultingCisco's Firepower 4100 Series NGFW Firewalls are single-rack units designed for deployment at the Internet edge. Appliances in this family deliver 5-10X faster throughput than the Cisco ASA 5585-X firewall they are engineered to replace. Local management can be done with Firepower Device Manager. All Firepower 4100 Series Next-Generation Firewalls have 8 integrated SFP+ interfaces and all accept a selection of add-in network modules for up to 24 interfaces. All Firepower 4100 Series Next-Generation Firewalls offer virtual private network load balancing, high availability, and clustering of up to six chassis. These security appliances feature an integrated 1 Gigabit Ethernet interface for network management, one RJ-45 console interface, and one USB 2.0 port.

The Firepower 4110 firewall includes 200 GB of storage and delivers 13 Gbps firewall throughput and 6 Gbps IPsec VPN throughput. The 4110 model supports 10 million simultaneous sessions, 64K new connections per second, and as many as 10K VPN peers. Cisco's Firepower 4112 firewall has 400 GB of storage and delivers 19 Gbps firewall performance and 8.5 Gbps IPsec VPN throughput. The 4112 firewall allows 10 million concurrent sessions, 98K new connections per second, and a maximum of 10,000 VPN peers. Cisco's Firepower 4115 appliance comes with 400 GB of storage and delivers 33 Gbps firewall performance and 8 Gbps IPsec VPN performance. The 4115 unit allows 15 million concurrent sessions, 210K new connections/second, and a maximum of 15,000 VPN peers. Cisco's Firepower 4120 device features 200 GB of storage and offers 22 Gbps firewall throughput and 19 Gbps IPsec VPN performance. The 4120 firewall allows 15 million concurrent sessions, 118K new connections per second, and up to 15,000 VPN peers. Cisco's Firepower 4125 appliance features 800 GB of storage and offers 45 Gbps firewall performance and 19 Gbps IPsec VPN throughput. The 4125 firewall allows 25 million concurrent sessions, 269K new connections per second, and as many as 20K VPN peers.

The Firepower 4140 model firewall features 400 GB of storage and offers 32 Gbps firewall throughput and 13 Gbps IPsec VPN performance. The 4140 firewall supports 25 million concurrent sessions, 172K new connections/second, and a maximum of 20K VPN peers. Cisco's more recent Firepower 4145 appliance features 800 GB of storage and offers 53 Gbps firewall performance and 24 Gbps IPsec VPN throughput. The 4145 firewall supports 30 million simultaneous sessions, 365K new connections/second, and as many as 20K VPN peers. Cisco's Firepower 4150 firewall comes with 400 GB of storage and offers 45 Gbps firewall performance and 14 Gbps IPsec VPN performance. The 4150 firewall allows 30 million simultaneous sessions, 263K new connections/second, and a maximum of 20K VPN peers.

Cisco Secure Firewall 4200 Family
Cisco Secure Firewall 4200 ExpertsCisco's Secure Firewall 4200 devices are expandable single rack units intended for use at large enterprise campuses and data centers that require best-in-class performance, visibility, and scalability. Secure Firewall 4200 Series appliances offer more than twice the throughput of previous generation firewalls and offer high port density. As many as 8 units can be clustered for fault tolerance and scale. Crypto accelerator allows traffic decryption without performance loss, and zero trust application access (ZTAA) permits comprehensive threat inspection for applications. 4200 Series appliances can be managed via the Firewall Management Center or in the cloud with Cisco Defense Orchestrator. Every 4200 model comes with eight 1/10/25 Gigabit Ethernet integrated ports and has two module bays for rapid upscaling. As many as 24 Ethernet interfaces are possible. Every 4200 unit comes with 1.8 TB x 2 storage.

Cisco's Secure Firewall 4215 product is built for large enterprise campuses with high growth expectations. The 4215 delivers 90 Gbps firewall stateful inspection throughput and 45 Gbps IPsec VPN performance. The 4215 can handle 15 million concurrent firewall connections, 350 K new connections each second, and up to 20,000 VPN peers. The Secure Firewall 4225 product is designed for large enterprise data centers. The device delivers 95 Gbps firewall throughput and 80 Gbps IPsec VPN performance. Cisco's 4225 firewall allows 30 million simultaneous firewall connections, 600 K new connections per second, and up to 25,000 VPN peers. The Secure Firewall 4245 product is intended for service providers who need to handle a high volume of traffic. Cisco's 4245 delivers 180 Gbps firewall performance and 140 Gbps IPsec VPN throughput. The 4245 can support 60 million simultaneous firewall connections, 800 K new connections each second, and as many as 30,000 VPN peers.

Cisco Firepower 9300 Series NGFW Firewalls
Cisco Firepower 9300 Series Next-Generation Firewalls ExpertsCisco's Firepower 9300 Series NGFW Firewalls are highly scalable and ultra-high performing firewalls. The 3RU chassis of Firepower 9300 Next-Generation Series firewalls can hold two add-in network modules as well as three security modules. Fully loaded, the 9300 can support 24 10-Gigabit Ethernet Enhanced Small Form-Factor Pluggable network interfaces or eight 100 Gigabit Ethernet ports. Intrachassis clustering of up to five 9300 chassis allows a total 1.2 Tbps of firewall throughput. The high-end Cisco Firepower 9300 SM-56 x 3 delivers 235 Gbps firewall throughput and 27 Gbps IPsec VPN throughput. The unit allows 195 million simultaneous sessions, 4.75 M new connections per second, and up to 20,000 VPN peers.

Firepower Services
Firepower NGFW firewalls accept software or physical modules that enable Cisco's Firepower Services, which provide layered protection against advanced attacks. Firepower Services are powered by technology acquired by Cisco from Sourcefire. Key capabilities of Firepower Services include:

  • Multi-layer defense against both familiar and new attacks
  • Cisco's Advanced Malware Protection (AMP) that uses big data to discover and remediate security breaches
  • Cisco's Next-Generation Intrusion Prevention System (NGIPS) that performs contextual analysis that covers clients, infrastructure, software applications, and content to discover attacks that incorporate simultaneous approaches
  • High-resolution Application Visibility and Control that is aware of thousands of applications and can automatically launch both standard and customized IPS policies depending on the degree of threats
Cisco Firepower Configuration Consultants

Firepower Services for Next Generation firewalls offer multi-layered threat protection

Smaller deployments of Firepower NGFW security appliances can be effectively administered via Cisco's on-box Adaptive Security Device Manager (ASDM) Adaptive Security Device Manager, a web-based utility included with all firewall models. ASDM includes a simple web console for configuring, administering, and debugging NGFW firewalls and service modules.

For multi-device and multi-site deployments, Cisco's Next Gerneration firewalls with Firepower Services can be managed with Cisco's Firepower Management Center, implemented as one or several physical or virtual appliances. Cisco's Firepower Management Center provides centralized firewall management, Application Visibility and Control, advanced IPS, URL filtering, and Cisco's Advanced Malware Protection (AMP). Because of ongoing rebranding since Cisco's purchase of Sourcefire Defense Center, Cisco's Firepower Management Center has been offered under various names that include Defense Center, FireSIGHT Defense Center, and Cisco Firesight Management Center.

Cisco Firepower Management Center Experts

Cisco Firepower Management Center unifies event and policy control for Firepower firewall appliances

Cisco's Firepower Management Center appliance offers features unavailable with Cisco's on-device Adaptive Security Device Manager tool. Additional capabilities include expanded context awareness, Advanced Malware Protection (AMP) with remediation for user devices, a dashboard that offers real-time network visualization, automated policy tuning based on risk assessment of threats, advanced IPS, custom application discovery for Application Visibility and Control (AVC), customized health alerts, enhanced reporting options, and APIs for host input and databases. Hardware-dependent features such as clustering, stacking, switching, routing, VPN, and NAT must be managed via Cisco's on-box ASDM or the Firepower CLI.

Progent's Migration Support for Cisco Next Generation Firewalls
Because Cisco has stopped offering the PIX and ASA 5500 product lines, many businesses are uncomfortable with relying on a key infrastructure component that might stop being supported by Cisco. Firepower Series firewalls offer the benefit of being new products and also bring important functions and financial benefits in comparison to legacy devices. These benefits include significantly higher throughput, optional Secure Sockets Layer VPN support, and a modular design that guards your investment by allowing you to add more security features whenever you need them. Progent's Cisco experts can help your company to determine the business value of for upgrading from PIX or Cisco ASA 5500 firewalls, create a migration plan that permits a quick and non-disruptive changeover, assist your IT staff to set up new Firepower NGFW Series firewalls, and offer online, consulting, and technical support services.

Other Ways Progent Can Support Your Cisco Firewalls
Cisco Firepower Series firewalls provide an array of setup, monitoring, and troubleshooting features that give you the ability to configure these security appliances to align optimally with your company's needs. Progent's CCIE certified network experts can assist you to design a cost-effective infrastructure that incorporates Cisco firewalls and that provides advanced protection, resilience, throughput, and recoverability. Progent's GISA and CISSP-ISSP-certified information security engineers can help you to develop a security strategy appropriate for your situation and can configure your PIX or ASA firewall to enforce your security policies. Progent's risk assessment engineers can assess the strength of your current firewall deployment and audit the overall security of your entire information system environment. Progent's Help Desk Call Center can deliver emergency online technical support for Cisco technology and offer fast access to a Cisco CCIE expert.

Progent offers online or onsite support and is available for occasional guidance to help your organization with a stubborn technical impasse or Progent offers comprehensive project management support to make sure your network security initiative is performed on time and on budget.

To see more information concerning Progent's consulting help for Cisco products, select a topic:

Contact Progent for Cisco Firewall Solutions
To ask Progent about consulting help with Cisco Firepower NGFW firewalls, call 1-800-993-9400 or visit Contact Progent.



An index of content::









    • Progent's certified professionals can assist you to assess the advantages of Microsoft Windows Server 2012 R2 for your organization, develop pilot environments and migration strategies, tune your infrastructure for local, multi-location, cloud-based, and hybrid environments, train your IT support team, develop a corporate-wide security strategy, automate IT administration, help with application development, and build and validate a disaster recovery/business continuity plan.
    © 2002-2026 Progent Corporation. All rights reserved.