Firepower Virtual - unclear performances in Datasheet

[amadoriale]

Hi,

we are currently deploying a large Azure cloud. Customer has multiple sites where he specifically demands 3gbps IPSEC connectivity on the HA firewalls, and these are in IPSEC VPN with Azure.

Unfortunately on the NGFW Datasheet I can only find performance indicators for NGFW throughput, not IPSEC VPN one.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw-virtual/datasheet-c78-742858.pdf

Anyone has any idea where to find this info, or if the FPRv can at all deal with such requirements? I can see that the 2150 can manage 10.000 VPN and 3gbps IPSEC while the biggest cloud (12 CPU) only reaches 750 VPNs.

Need help. Tyvm.

[Muhammad Awais Khan]

Hi,

if you are Cisco partner then you can access :https://ngfwpe.cisco.com/dashboard and do the sizing for the NGFW virtual option including Azure. I have notice throughput support of 1Gbps only for Azure and with ipsec throughput will be supported around 400 Mbps approximately. I am attaching snapshot from the tool for reference, I considered sizing of 400 Mbps in the tool

[amadoriale]

Muhammand, thank you for your reply, I am absolutely able to access that interface, I was just hoping there was some updated/proper documentation (the customer asks for it).

Furthermore, at this point to manage IPSEC VPNs it is much better to use ASAv - but alas, those cannot be managed under FMC and I really hate to have to install ASDM for it...

[Muhammad Awais Khan]

Agree with you :)