Firepower - command line to show some specifications on the datasheet

[quang-nv]

Hi everybody,

Our customer would like to see the following information via the firepower device command:

Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)
Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)
Maximum concurrent sessions, with AVC
Maximum new connections per second, with AVC
Transport Layer Security (TLS)
Throughput: NGIPS (1024B)
IPSec VPN throughput
(1024B TCP w/Fastpath)
Maximum VPN Peers

Is there a command that can help display this information. Or how can I verify that these parameters are correct.

[Network Diver]

I might be mistaken, but the only way I can think of is to put the device into network, fill it up with data traffic, enable all the inspection features and do monitor the system health over a longer period of time. The most resource intensive feature is probably SSL decryption/encryption.

Sample health monitor dashboard on Firewall Management Center for a Firepower 1120 device in transparent IPS mode.

Also hardware should not be sized that it reaches 100% resource limit during normal operation.

[ahollifield]

No. Why not just read the datasheet?

[Marvin Rhoads]

There's no such command.

The information is correct and is validated at multiple layers of review within Cisco prior to publication.