Cisco Secure Firewall 3100 Series

Cisco Secure Firewall 3100 Series performance and specification highlights

Cisco Secure Firewall 3100 Series performance and capabilities, running on Firewall Threat Defense (FTD) software Features 3105 3110 3120 3130 3140 Throughput: FW + AVC (1024B) 10 Gbps 17.0 Gbps 21.0 Gbps 38.0 Gbps 45.0 Gbps Throughput: FW + AVC + IPS (1024B) 10 Gbps 17.0 Gbps 21.0 Gbps 38.0 Gbps 45.0 Gbps Maximum concurrent sessions, with AVC 1.5 million 2 million 4 million 6 million 10 million Maximum new connections per second, with AVC 90,000 130,000 170,000 240,000 300,000 TLS1 3.2 Gbps 4.8 Gbps 6.7 Gbps 9.1 Gbps 11.5 Gbps Throughput: NGIPS (1024B) 10.0 Gbps 17.0 Gbps 21.0 Gbps 38.0 Gbps 45.0 Gbps IPSec VPN Throughput (1024B TCP w/Fastpath) 5.5 Gbps 8 Gbps 10 Gbps 17.8 Gbps 22.4 Gbps Projected IPSec VPN Throughput (1024B TCP w/Fastpath) with VPN Offload (FTD 7.2) NA 11.0 Gbps 13.5 Gbps 33.0 Gbps 39.4 Gbps Maximum VPN Peers 2,000 3,000 7,000 15,000 20,000 Local On-device Management Yes Yes Yes Yes Yes Centralized management Centralized configuration, logging, monitoring, and reporting are performed by the Firewall Management Center or alternatively in the cloud with Cisco Defense Orchestrator Application Visibility and Control (AVC) Standard, supporting more than 4000 applications, as well as geolocations, users, and websites AVC: OpenAppID support for custom, open source, application detectors Standard Cisco Security Intelligence Standard, with IP, URL, and DNS threat intelligence Cisco Secure IPS Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence Cisco Malware Defense Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available Cisco Secure Malware Analytics Available URL Filtering: number of categories More than 80 URL Filtering: number of URLs categorized More than 280 million Automated threat feed and IPS signature updates Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos Group (https://www.cisco.com/c/en/us/products/security/talos.html) Third-party and open-source ecosystem Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats High availability and clustering Active/active, Active/standby. Cisco Secure Firewall 3100 Series allows clustering of up to 8 chassis (no clustering on 3105) Cisco Trust Anchor Technologies Secure Firewall 3100 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details