Cisco Firepower 9300

Cisco Firepower 9300 is a scalable, carrier-grade and modular firewall designed for service providers, large data centers, high-performance computing centers, campuses, high- frequency trading environment and low latency required networks (less than 5-microsecond offload) and remarkable throughput which provides beyond 1Tbps when clustered.

The Firepower 9300 firewall handles programmatic orchestration, flow-offloading, and the management of security services with RESTful APIs. Furthermore, it is available in Network Equipment Building Standards (NEBS)-compliant configurations. The 9300 Series runs either the Cisco Secure Firewall ASA or Threat Defense (FTD) software.

Cisco Firepower Licenses

Features and Benefits

Firepower 9300 provides World-class threat intelligence by communicating with Cisco TALOS, the biggest threat intelligence team in the world. Cisco TALOS is included of world-class researchers and engineers. visibility in Industry-leading level enables rapid detection and protection for Cisco customers against known and emerging threats.

After that, Cisco FPR 9300 is a Modular, carrier-grade appliance provides low latency and high performance. It is able to Quickly inspect TLS encrypted web traffic via hardware acceleration, Block DDoS attacks with integrated, enterprise-grade Radware Virtual DefensePro (vDP) and Detect and block network intrusions with next-generation IPS (NGIPS), deploy scalable VPN options, and utilize advanced URL filtering. Delivers performance beyond 1 Tbps when clustered. Furthermore, Cisco 9300 FPR firewall is offering scalability and availability by benefiting from Multi-instance functionality that allows create independent logical firewalls and supports large flow handling, orchestration of security services, and Cisco Application Centric Infrastructure (ACI).

NEBS-compliant configurations also available. With Deep visibility and threat prioritization, Automated risk ranking and impact flags are provided by our deep visibility into your environment and applications, reducing event volume so you can quickly prioritize threats and take action. Share intelligence, context, and policy controls across Cisco security solutions.

Multi-Instance Capability

The Multi-Instance capability is only supported on Firepower 4100 and 9300. This feature instantiates multiple logical devices on a single module or appliance Leveraging Docker infrastructure and container packaging. Cisco Firepower 9300 Multi-instance capability enables complete traffic processing and management isolation and supports physical and logical interface and VLAN separation at Supervisor. You can find the instance scalability by platform in the following figure:

Firepower Management

For this series, Chassis management is independent from applications. Customers can use on-box Cisco FDM chassis manager, or use CLI, REST API, ASDM, and Cisco Security Manager (CSM) for ASA or Off-box Firepower Management Centre (FMC) and REST API for FTD
Note: Customers should use the off-box APsolute Vision for Radware vDP management.

Cisco Firepower 9300 Models

Within these series all the models can support 8 x SFP+ on-chassis and 1/10/40/100G optional interfaces, more than 80 URL filtering categories, more than 280 million recognized URLs and can provide the following throughputs. Moreover, all existing models can be managed with either on-box FDM or Firepower management center, FMC.

Cisco Firepower SM-24 can support up to 75G firewall, 21G NGFW and 30G NGIPS throughput. Also it can handle up to 30 million concurrent sessions and 130K new connections per second, with AVC.

Cisco Firepower SM-36 can support up to 80G firewall, 29G NGFW and 37G NGIPS throughput. Also it can handle up to 30 million concurrent sessions and 185K new connections per second, with AVC.

Cisco Firepower SM-40 can support up to 80G firewall, 48G NGFW and 57G NGIPS throughput. Also it can handle up to 35 million concurrent sessions and 380K new connections per second, with AVC.

Cisco Firepower SM-44 can support up to 80G firewall, 43G NGFW and 57G NGIPS throughput. Also it can handle up to 30 million concurrent sessions and 295K new connections per second, with AVC.

Cisco Firepower 3xSM-44 can support up to 234G firewall, 132G NGFW and 148G NGIPS throughput. Also it can handle up to 63 million concurrent sessions and 850K new connections per second, with AVC.

Cisco Firepower SM-48 can support up to 80G firewall, 55G NGFW and 65G NGIPS throughput. Also it can handle up to 35 million concurrent sessions and 450K new connections per second, with AVC.

Cisco Firepower SM-56 can support up to 80G firewall, 64G NGFW and 73G NGIPS throughput. Also it can handle up to 35 million concurrent sessions and 490K new connections per second, with AVC.

Cisco Firepower 3xSM-56 can support up to 253G firewall, 153G NGFW and 175G NGIPS throughput. Also it can handle up to 60 million concurrent sessions and 1.1 million new connections per second,

Standard Network Interface

In Cisco FPR 9300, supervisor attaches security modules to network and all interfaces are called “Ethernet” and 1-referenced (i.e. Ethernet1/1), all external network ports require Fibre or copper transceivers (SFP) and third-party SFP are allowed on best-effort support basis.

Fail-to-Wire Network Modules

These are fixed interfaces with no removable SFP support or module OIR:

Cisco firepower 9300 License 

Like most-recent Cisco products, Cisco Firepower 9300 licenses can be enabled by ordering Cisco smart licenses. Currently, there are two types of license entitlement is available for this series:

• ASA License Entitlements: Support for Strong Encryption, Security Contexts, Carrier Inspections.

• FTD License Entitlements: Support for Threat, Malware, and URL Services. To enable full FTD capabilities on Firepower series you should purchase –TMC smart licenses.

Customers can purchase these licenses in 3,5 and 7-year subscription. Customers can benefit from Cisco firewall licensing to enable automated detection within their network using AMP and TALOS servers.

Cisco Firepower 9300 Smart Licensing

The Cisco Firepower 9300 license use an innovative way for registering all product instances on Cisco smart software management website. Also, Cisco Firepower 9300 PLR license could be used to activate all instances permanently and without connecting to the internet.

You can contact our professionals by filling the price form or using the call number. Our team delivers you the most suitable price and the easiest way of order that is in accordance with your needs.

FAQ