Danh mục

Model	FPR2120-NGFW-K9
Hardware specifications
Integrated I/O	12 x 10M/100M/1GBASE-T Ethernet interfaces (RJ- 45) 4 x 1 Gigabit (SFP) Ethernet interfaces
Network modules	None
Maximum number of interfaces	Up to 16 total Ethernet ports, (12x1G RJ-45, 4x1G SFP)
Integrated network management ports	1 x 10M/100M/ 1GBASE-T Ethernet port (RJ-45)
Serial port	1 x RJ-45 console
USB	1 x USB 2.0 Type-A (500mA)
Storage	1x 100 GB, 1x spare slot (for MSP)
Form factor (rack units)	1RU
Power supply configuration	Single integrated 250W AC power supply.
AC input voltage	100 to 240V AC
AC maximum input current	< 2.7A at 100V
AC maximum output power	250W
AC frequency	50 to 60 Hz
AC efficiency	>88% at 50% load
Redundancy	None
Fans	4 integrated (2 internal, 2 exhaust) fans
Noise	56 dBA @ 25C 74 dBA at highest system performance.
Rack mountable	Yes. Fixed mount brackets included. (2- post). Mount rails optional (4-post EIA-310-D rack)
Dimensions (H x W x D)	4.4 x 42.9 x 50.2 cm
Weight	7.3 kg with 2x SSDs
Temperature: operating	0 to 40°C
Temperature: nonoperating	-20 to 65°C
Humidity: operating	10 to 85% noncondensing
Humidity: nonoperating	5 to 95% noncondensing
Performance specifications and feature with Cisco Threat Defense software
Throughput: FW + AVC (1024B)	3.4 Gbps
Throughput: FW + AVC + IPS (1024B)	3.4 Gbps
Maximum concurrent sessions, with AVC	1.5 million
Maximum new connections per second, with AVC	18K
TLS	475 Mbps
Throughput: IPS (1024B)	3.5 Gbps
IPSec VPN Throughput (1024B TCP w/Fastpath)	1.2 Gbps
Maximum VPN Peers	3500
Cisco Firepower Device Manager (local management)	Yes
Centralized management	Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator
Application Visibility and Control (AVC)	Standard, supporting more than 4000 applications, as well as geolocations, users, and websites
AVC: OpenAppID support for custom, open source, application detectors	Standard
Cisco Security Intelligence	Standard, with IP, URL, and DNS threat intelligence
Cisco Firepower NGIPS	Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
Cisco AMP for Networks	Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available
Cisco AMP Threat Grid sandboxing	Available
URL Filtering: number of categories	More than 80
URL Filtering: number of URLs categorized	More than 280 million
Automated threat feed and IPS signature updates	Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos Group
Third-party and open-source ecosystem	Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats
High availability and clustering	Active/standby
Cisco Trust Anchor Technologies	Firepower 2100 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details

Tùy chọn License cho Cisco Firepower 2120

L-FPR2120T-T=	Cisco FPR2120 Threat Defense Threat Protection License
L-FPR2120T-TC=	Cisco FPR2120 Threat Defense Threat and URL License
L-FPR2120T-AMP=	Cisco FPR2120 Threat Defense Malware Protection License
L-FPR2120T-TM=	Cisco FPR2120 Threat Defense Threat and Malware License
L-FPR2120T-URL=	Cisco FPR2120 Threat Defense URL Filtering License
L-FPR2120T-TMC=	Cisco FPR2120 Threat Defense Threat, Malware and URL License
L-FPR2120-P=	Cisco Defense Orchestrator for Firepower 2120