topic Re: NGFW Sizing in Network Security

NGFW Sizing

a.daghestani — Tue, 14 Dec 2021 08:48:43 GMT

Hi,

Please I need an advise to determine the right NGFW based on the below requirements:

- Each NGFW physical appliance should provide minimum of 240 Gbps Firewall throughput.

- Each NGFW physical appliance must support minimum of 850,000 new TCP connections per second.

Thank you

Re: NGFW Sizing

Marvin Rhoads — Tue, 14 Dec 2021 18:26:09 GMT

No currently available Cisco firewall in a single physical appliance can scale to that level. That level of throughput can only be accomplished with clustering. It would require a 6-node cluster (3 each SM-56 security modules per chassis spread across two Firepower 9300 chassis).

Re: NGFW Sizing

Rohit Patil — Wed, 24 Apr 2024 05:22:41 GMT

Hi Marvin.

Is there a firewall which will scan/inspect inline traffic of 40 to 60 Gbps using some NGFW capabilities?
Which is the best suitable model for this size?

Re: NGFW Sizing

tvotna — Wed, 24 Apr 2024 07:34:14 GMT

https://www.cisco.com/c/en/us/products/collateral/security/firewalls/secure-firewall-4200-ds.html

Re: NGFW Sizing

Marvin Rhoads — Wed, 24 Apr 2024 14:37:21 GMT

@Rohit Patil, as @tvotna noted, the 4200 series is the best choice currently for this required throughput. Check the data sheet for other details which might indicate whether the 4215 or 4225 is the better choice.