Cisco Firepower 9300 Series Appliances

product introduction

Cisco 9300 Series Scalable Firepower Equipment (more than 1 terabyte per second in cluster mode). With a modular design suitable for servers, very large processing centers, data centers and other environments that require very high throughput and latency of less than 5 microseconds. These devices offer exceptional performance despite the activation of advanced defense capabilities. This series of equipment has flow-offloading and programmatic orchestration capabilities and security services management using RESTful APIs. The 9300 Series is capable of running Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) software.

Product Specifications

Model	Firewall	NGFW	Next-Generation Intrusion Prevention System (NGIPS)	Interfaces	Optional interfaces
SM-24	75G	21G	30G	8 x SFP+ on-chassis	2 x NM’s: 1/10/40/100G, FTW
SM-36	80G	29G	37G	8 x SFP+ on-chassis	2 x NM’s: 1/10/40/100G, FTW
SM-40(New)	80G	48G	57G	8 x SFP+ on-chassis	2 x NMs: 1/10/40/100G, FTW
SM-44	80G	43G	57G	8 x SFP+ on-chassis	2 x NM’s: 1/10/40/100G, FTW
SM-44 x 3	234G	132G	148G	8 x SFP+ on-chassis	2 x NM’s: 1/10/40/100G, FTW
SM-48(New)	80G	55G	65G	8 x SFP+ on-chassis	2 x NMs: 1/10/40/100G, FTW
SM-56(New)	80G	64G	73G	8 x SFP+ on-chassis	2 x NMs: 1/10/40/100G, FTW
SM-56 x 3	235G	153G	175G	8 x SFP+ on-chassis	2 x NMs: 1/10/40/100G, FTW

Equipment performance with FTD software

Features	SM-24	SM-36	SM-40	SM-44	3 x SM-44	SM-48	SM-56	3 x SM-56
Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)	25 Gbps	34 Gbps	54 Gbps	50 Gbps	148 Gbps	64 Gbps	70 Gbps	168 Gbps
Throughput: FW + AVC + Intrusion Prevention System (IPS (1024B)	21 Gbps	29 Gbps	48 Gbps	43 Gbps	132 Gbps	55 Gbps	64 Gbps	153 Gbps
Maximum concurrent sessions, with AVC	30 million	30 million	35 million	30 million	63 million	35 million	35 million	60 million
Maximum new connections per second, with AVC	130K	185K	380K	295K	850K	450K	490K	1.1M
TLS (Hardware Decryption)²	7.5 Gbps	8.5 Gbps	10 Gbps	10 Gbps	25 Gbps	11 Gbps	12 Gbps	28 Gbps
Throughput: NGIPS (1024B)	30 Gbps	37 Gbps	57 Gbps	57 Gbps	148 Gbps	66 Gbps	73 Gbps	175 Gbps
IPSec VPN throughput (1024B TCP w/Fastpath)	13.5 Gbps	16 Gbps	20 Gbps	17 Gbps	51 Gbps	25 Gbps	27 Gbps	81 Gbps¹
Maximum VPN Peers	20,000	20,000	20,000	20,000	60,000	20,000	20,000	60,000
Centralized management	Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator
AVC	Standard, supporting more than 4000 applications, as well as geolocations, users, and websites
AVC: OpenAppID support for custom, open-source application detectors	Standard
Cisco Security Intelligence	Standard, with IP, URL, and DNS threat intelligence
Cisco Firepower NGIPS	Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
Cisco Advanced Malware Protection (AMP) for Networks	Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally available
Cisco AMP Threat Grid sandboxing	Available
URL filtering: number of categories	More than 80
URL filtering: number of URLs categorized	More than 280 million
Automated threat feed and IPS signature updates	Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos^® group (https://www.cisco.com/c/en/us/products/security/talos.html)
Third-party and open-source ecosystem	Open API for integrations with third-party products; Snort^® and OpenAppID community resources for new and specific threats
High availability and clustering	Active/standby; up to 6 modules across up to 6 different Firepower 9300 chassis.
Cisco Trust Anchor Technologies	Cisco Firepower 9300 Series platforms include Trust Anchor Technologies for supply chain and software image assurance.

Equipment performance with ASA software

Features	SM-24	SM-36	SM-40	SM-44	3 x SM-44	SM-48	SM-56	3 x SM-56
Stateful inspection firewall throughput¹	75 Gbps	80 Gbps	80 Gbps	80 Gbps	234 Gbps	80 Gbps	80 Gbps	235 Gbps
Stateful inspection firewall throughput (multiprotocol)²	50 Gbps	60 Gbps	55 Gbps	60 Gbps	130 Gbps	60 Gbps	64 Gbps	172 Gbps
Concurrent firewall connections	55 million	60 million	55 million	60 million	70 million	60 million	60 million	195 million
Firewall latency (UDP 64B microseconds)	3.5	3.5	3.5	3.5	3.5	3.5	3.5	3.5
New connections per second	800,000	1.2 million	1.6 million	1.8 million	4 million	1.8 million	2 million	4.75 million
IPsec VPN throughput (450B UDP L2L test)	15 Gbps	18 Gbps	25 Gbps	20 Gbps	60 Gbps³	27 Gbps	30 Gbps	74 Gbps
Maximum VPN Peers	20,000	20,000	20,000	20,000	60,000	20,000	20,000	60,000
Security contexts (included; maximum)	10; 250
High availability	Active/active and active/standby
Clustering	Up to 16 security modules across up to 16 different Firepower 9300 chassis
Scalability	VPN load balancing, firewall clustering
Centralized management	Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator
Adaptive Security Device Manager	Web-based, local management for small-scale deployments

Cisco Firepower 9300 Series Appliances

Related products

Cisco Switch Catalyst 9300

Cisco Switch Catalyst 9200

Cisco Switch 3850

Cisco Switch 2960X/XR

Cisco Switch Catalyst 9500

Cisco Switch Catalyst 9400

Cisco Firepower 9300 Series Appliances

Contact us

Latest Articles

Last News

Related Links