Cisco FPR1140-NGFW-K9 Firepower 1140 Next-Generation Firewall – 8-Port GE, 4-Port SFP, 2.2Gbps NGFW

Enterprise Next-Generation Firewall Security

The Cisco FPR1140-NGFW-K9 is part of the Cisco Firepower 1000 Series and provides next-generation firewall capabilities for enterprise networks, branch offices and Internet-edge deployments. The platform combines firewall functionality with advanced threat protection, intrusion prevention, application control and security visibility.

The appliance can run Cisco Secure Firewall Threat Defense (FTD) and is designed to provide centralized security policy enforcement across enterprise network environments. Its compact 1RU form factor makes it suitable for standard network racks and data-center installations.

Key Features

• Next-generation firewall functionality
• Advanced intrusion prevention capabilities
• Application visibility and control
• URL filtering with applicable security subscriptions
• Advanced malware protection with applicable subscriptions
• Site-to-site and remote-access VPN capabilities
• High-availability deployment options where supported
• Centralized security policy management
• Enterprise threat visibility and monitoring

High-Speed Network Connectivity

The FPR1140-NGFW-K9 provides a combination of copper and fiber network interfaces for flexible enterprise connectivity. It includes 8 × 10/100/1000BASE-T RJ-45 interfaces and 4 × SFP interfaces, allowing the firewall to connect to LAN, WAN, aggregation and other network infrastructure.

The platform also includes a dedicated management Ethernet interface, console connectivity and USB connectivity for administration and maintenance operations.

Network Interface Configuration

Next-Generation Firewall Performance

The Cisco Firepower 1140 is designed to inspect and secure network traffic while providing advanced threat-defense capabilities. Under Cisco's specified performance methodology, the platform provides up to 2.2 Gbps NGFW throughput.

Actual throughput can vary depending on enabled security services, traffic patterns, packet sizes, policies, encryption and other deployment conditions. Performance figures should therefore be evaluated according to the security features and traffic profile required for the intended deployment.

Advanced Threat Protection

When deployed with Cisco Secure Firewall Threat Defense and the applicable security subscriptions, the FPR1140 can provide multiple layers of network protection. These capabilities help security teams identify, inspect and control network traffic across enterprise environments.

• Next-generation firewall inspection
• Intrusion prevention and detection
• Application visibility and control
• URL filtering
• Advanced malware protection
• File and network threat inspection
• Security policy enforcement
• Threat intelligence integration

Application Visibility and Control

Cisco Secure Firewall software provides application-aware security capabilities that allow administrators to identify and control applications traversing the network. Security policies can be configured according to application, user, device, destination and other traffic characteristics.

This provides greater visibility into network traffic and helps security administrators implement policies appropriate for business applications, Internet access and enterprise services.

VPN and Secure Connectivity

The FPR1140 platform supports secure VPN connectivity for enterprise network environments. Depending on the deployed software and licensing, the firewall can provide secure site-to-site connectivity and remote-access VPN services.

• Site-to-site VPN
• Remote-access VPN
• IPsec VPN
• Secure branch connectivity
• Encrypted enterprise communications

Cisco Secure Firewall Threat Defense

The Cisco Secure Firewall Threat Defense (FTD) software provides the security operating environment for next-generation firewall deployments. It combines firewall, intrusion prevention, application control and threat-defense functionality within a unified security platform.

Security administrators can use Cisco management tools to configure policies, monitor events and maintain visibility across protected network infrastructure.

Centralized Security Management

The FPR1140 can be integrated into Cisco security management environments for centralized policy configuration, event monitoring and operational visibility. Depending on the deployed architecture, Cisco management platforms can provide centralized administration across multiple Secure Firewall appliances.

• Centralized firewall policy management
• Security event monitoring
• Threat visibility
• Application and URL policy control
• Device and policy administration
• Security reporting and analytics

Enterprise Deployment

The Cisco FPR1140-NGFW-K9 is designed for organizations requiring next-generation firewall protection at branch offices, enterprise Internet edges, distributed locations and other security-sensitive network environments.

Its combination of Gigabit Ethernet, SFP connectivity, advanced threat protection and 1RU rack-mount architecture makes it suitable for a variety of enterprise network security applications.

Hardware and Storage

The FPR1140 is built as a dedicated 1RU security appliance. The platform includes integrated processing resources and internal storage for the firewall software and security operations.

• 1RU rack-mount appliance
• 8 × Gigabit Ethernet RJ-45 interfaces
• 4 × SFP interfaces
• Dedicated management interface
• RJ-45 console connectivity
• USB 3.0 connectivity
• 200GB internal storage

Ideal Applications

• Enterprise network security
• Branch office firewall deployments
• Internet-edge security
• Corporate headquarters
• Data-center edge security
• Distributed enterprise networks
• Secure remote-site connectivity
• VPN gateway deployments
• Application-aware firewall environments
• Threat prevention and intrusion protection

Deployment Considerations

The security capabilities and performance of the FPR1140-NGFW-K9 depend on the installed Cisco Secure Firewall software version, configured security policies and applicable licensing or subscriptions. Advanced services such as URL filtering, advanced malware protection and other security capabilities may require the appropriate Cisco security subscription.

For production deployments, administrators should select the software, licenses, optics and security subscriptions according to the required traffic throughput, inspection services and network architecture.