topic Firepower is the term Cisco in Network Security

Firepower vs NGIPS vs FireSight vs FirePower Management Center

esa_fresa — Sun, 10 Mar 2019 13:42:52 GMT

I'm struggling to understand the distinction between all of these terms. Is someone able to help me understand what is what?

Firepower is the term Cisco

Oliver Kaiser — Thu, 10 Nov 2016 22:52:13 GMT

Firepower is the term Cisco uses for most of the products aquired from Sourcefire.

FMC

Firepower Management Center aka Firesight Management Center aka Defense Center.
Firepower Management Center has been re-branded two times, its all the same

Central Management for firepower devices (NGIPS, ASA Firepower Module, FTD)

NGIPS

Dedicated IPS appliance / IPS component of the firepower solution (also used on ASA Firepower module and FTD)

ASA with Firepower Services

ASA with software/hardware module running Firepower services. (= two different images running on the same box. Traffic is redirected to firepower module for layer 7 inspection)

FTD

Firepower Threat Defense is the new unified image combining ASA software and firepower software into a single image. (not full feature parity to ASA yet)

If you need further information let me know.

What about the term NGFW? and

catanner19 — Tue, 17 Jan 2017 21:36:00 GMT

What about the term NGFW? and FirePOWER vs Firepower??

http://www.cisco.com/c/dam/m/en_us/products/security/ngips/NGIPS_transition_guide.pdf

Customers will not buy it, if they do not know what it is.

NGFW is the term used for

Oliver Kaiser — Wed, 18 Jan 2017 08:27:43 GMT

NGFW is the term used for firewalls that provide features up to layer 7 including IPS, AMP, URL Filtering, User Identity Integration etc... its basically just a marketing term used by vendors and is used for both ASA with Firepower Services and the new Firepower Appliances with run FTD in the cisco world.

Considering FirePOWER vs Firepower... Thats the same, but marketing will always write FirePOWER and engineers dont care and just write it as Firepower 😉

How Cisco Firepower-Firesight

Ramakrishnan V — Tue, 21 Mar 2017 11:54:20 GMT

How Cisco Firepower-Firesight differs from Defense Center, Both(Firesight and Defense Center) are same.

@Ramakrishnan V ,

Marvin Rhoads — Tue, 21 Mar 2017 12:22:15 GMT

[@v.ramakrishnan] ,

If you are asking a question then, yes, they are the same product. Cisco has only changed then name with newer versions.

When the product was made by Sourcefire it was called Defense Center. Cisco acquired that company and started calling it FireSIGHT Management Center. That was version 5.x.

When they updated to version 6.x, they changed the name to the current FirePOWER Management Center.

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html#id_38024

Re: Firepower is the term Cisco

bcoverstone — Tue, 31 Oct 2017 02:43:00 GMT

It's all just Snort.

Re: Firepower is the term Cisco

jsburch01 — Fri, 03 Apr 2020 14:14:44 GMT

Oliver,

Thank you for your response. I worked with the IPS back in 2017 and and need to catch up on the new terms.

My question is concerning the new terminology and usage today in 2020

It appears that cisco has discontinued stand alone IPS systems (NGIPS) and is focusing only on their IPS/firewall Solutions? is this true? Another way of asking, is it true that, if I have a an ASA and I want to have a separate IPS I need to buy a system that can run the FTD image or do a virtual FTD to have a stand alone IPS now?

Thanks

Re: Firepower is the term Cisco

Marvin Rhoads — Fri, 03 Apr 2020 18:24:49 GMT

The separate NGIPS (Firepower 7000 and 8000 series and NGIPSv) went end of sales as of June 2019:

https://www.cisco.com/c/en/us/products/collateral/security/firepower-7000-series-appliances/eos-eol-notice-c51-741685.html

If you have an ASA you can run Firepower service modules on some models. That adds the IPS features.

Or you can convert it (for more recent ASAs - not all models are eligible) to run FTD image which includes the NGFW and NGIPS features as well.

Or you can purchase a new Firepower appliance (1000, 2000, 4100 and 9300 series hardware, FTDv either on-prem or in AWS and Azure public clouds). Those can generally run as either NGFW or NGIPS, depending on how you configure them.