Model

FPR1010-NGFW-K9

NGFW

1.5 Gbps

Next-Generation Intrusion Prevention System (NGIPS)

1.5 Gbps

Interfaces

8 x RJ45, 4 x SFP

Form factor (rack units)

1RU

Dimensions (H x W x D)

1.72 x 17.2 x 10.58 in.

Features

1010

1120

1140

Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)

650 Mbps

1.5 Gbps

2.2 Gbps

Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)

650 Mbps

1.5 Gbps

2.2 Gbps

Maximum concurrent sessions, with AVC

100K

200K

400K

Maximum new connections per second, with AVC

6K

15K

22K

Transport Layer Security (TLS)

150 Mbps

700 Mbps

1 Gbps

Throughput: NGIPS (1024B)

650 Mbps

1.5 Gbps

2.2 Gbps

IPSec VPN throughput (1024B TCP w/Fastpath)

300 Mbps

1 Gbps

1.2 Gbps

Maximum VPN Peers

75

150

400

Firepower Device Manager (local management)

Yes

Yes

Yes

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Defense Orchestrator

AVC

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open-source application detectors

Standard

Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Firepower NGIPS

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Advanced Malware Protection (AMP) for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with AMP for Endpoints is also optionally available.

AMP Threat Grid sandboxing

Available

URL filtering: number of categories

More than 80

URL filtering: number of URLs categorized

More than 280 million

Automated threat feed and IPS signature updates

Yes: class-leading Collective Security Intelligence (CSI) from the Talos® group

Third-party and open-source ecosystem

Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats

High availability and clustering

Active/standby