Enterprise-Scale Modular Security Platform

The Cisco Firepower 9300 provides a modular security infrastructure for organizations requiring scalable firewall, intrusion prevention and advanced network security capabilities. Unlike a fixed security appliance, the FPR9300-AC chassis provides the physical platform into which compatible Firepower 9300 security modules are installed.

The chassis accommodates up to three security modules, allowing organizations to build security capacity according to deployment requirements. Cisco supports security modules including the SM-40, SM-48 and SM-56, subject to the applicable software and hardware configuration.

Key Features

Flexible Network Connectivity

The Firepower 9300 Supervisor provides eight 10-Gigabit Ethernet SFP+ ports together with two network-module slots for I/O expansion. Supported network modules can provide additional 10G, 40G and 100G connectivity depending on the selected hardware configuration.

With supported network modules installed, a Firepower 9300 chassis can provide up to 24 × 10G SFP+ interfaces, up to 8 × 40G QSFP+ interfaces or up to 8 × 100G interfaces, depending on the module combination and configuration.

Modular Security Architecture

The FPR9300-AC separates the chassis infrastructure from the security processing modules, providing a scalable architecture for demanding security environments. Security modules perform the security processing while the chassis provides power, cooling, supervision and network connectivity.

Firepower 9300 Security Modules

The FPR9300-AC chassis supports compatible Firepower 9300 security modules. Current Cisco documentation identifies the SM-40, SM-48 and SM-56 security modules for the platform.

• SM-40 — 40 physical-core CPU security module
• SM-48 — 48 physical-core CPU security module
• SM-56 — 56 physical-core CPU security module

Security-module throughput, memory and storage specifications depend on the specific module installed. The chassis itself should therefore not be represented as having the memory or firewall throughput of a particular security module unless that module is included in the product configuration.

High-Performance Security Processing

When populated with supported security modules, the Firepower 9300 platform provides high-performance firewall and next-generation security processing for demanding network environments. Cisco's Firepower 9300 Series supports Cisco Secure Firewall Threat Defense and Cisco Secure Firewall ASA software.

Security performance depends on the installed security module. For example, Cisco specifies different firewall, NGFW and NGIPS performance levels for the SM-40, SM-48 and SM-56 configurations.

Cisco Secure Firewall Software

The Firepower 9300 platform supports Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall ASA software. This provides organizations with flexibility to deploy next-generation firewall security, application visibility, intrusion prevention, VPN services and security policy enforcement according to the selected software architecture and licensing.

• Cisco Secure Firewall Threat Defense (FTD)
• Cisco Secure Firewall ASA
• Application Visibility and Control
• Intrusion Prevention System
• VPN security
• Security intelligence and policy enforcement
• Centralized security management

Enterprise Management and Interfaces

The Firepower 9300 Supervisor provides dedicated management and administration interfaces for chassis operation. The platform includes a Gigabit Ethernet management interface, an RJ-45 serial console and a USB Type-A interface.

• 1 × Gigabit Ethernet management port
• 1 × RJ-45 Cisco serial console
• 1 × USB 2.0 Type-A
• 8 × 10G SFP+ interfaces on the Supervisor
• 2 × network-module slots

High-Capacity Storage Architecture

Storage capacity is associated with the installed security modules. Cisco specifies up to 4.8 TB per Firepower 9300 chassis, based on up to 1.6 TB per security module in a RAID-1 configuration.

Actual storage capacity depends on the security modules installed and the selected configuration.

Chassis Configuration Considerations

The FPR9300-AC is sold as the AC chassis platform and should be distinguished from a complete Firepower 9300 security system. The chassis includes two AC power supplies, four fans and the rack-mount kit, and accommodates up to three security modules.

Security processing capacity, memory, storage and application throughput depend on the security modules selected for the chassis. This modular design allows organizations to build a Firepower 9300 configuration that matches their required security performance and interface requirements.