Does the FPR firewall support / facilitate SD-WAN?

[CourtCopex]

Hello, do FPR firewalls support SD-WAN out of the box or are there certain images and licenses required to support SD-WAN on, as an example, a FPR2110-ASA-K9? Thank you,

[Rob Ingram · Accepted solution]

@CourtCopex no the Firepower firewalls doe not support a fully featured SDWAN solution. From FTD 7.1 you have basic features with application aware policy routing. This requires the FTD image on the Firepower hardware.

The part number you quoted - FPR2110-ASA-K9 - is the older ASA image, which does not support Application-Aware Policy routing.

You should look at the Cisco SDWAN solution - https://www.cisco.com/c/en/us/solutions/enterprise-networks/sd-wan/index.html

[CourtCopex]

Thanks Rob.  Very helpful.  I think the customer was anticipating a firewall solution that mimicked Fortinet's Next Gen firewall offering but doesn't seem to be the case for the FPRs.  I'm sending them the link above. 

[Rob Ingram]

@CourtCopex perhaps the Cisco meraki hardware is the solution for your customer - https://meraki.cisco.com/products/security-sd-wan/features/

[Jack G]

7.2 added additional features: https://youtu.be/KPp3BgBKm34 If familiar with FMC/FTD what’s the benefits of looking into Meraki? Will FTD replace Meraki once it more mature? Seems like Cisco keeps adding a lot of new features to FTD.

[tisnow]

7.4 adds more SD-WAN capabilities

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/740/threat-defense-release-notes-74.html

Including SGT performance Routing
WAN Dashboard
HTTP Path and IP Pings - for monitoring uptime, jitter, response