firepower sizing

[ERIsci]

I need to know how I can make sizing to firepower

we already have this module FTD 4110, but we think it's not suitable for our environment  

[MHM Cisco World]

contact cisco sales engineer they can help you to decided if FPR 4K ok or you need to go to 9K 

MHM

[Rob Ingram]

@ERIsci can you be more specific. What are your requirements? What is the expected Firewall, IPS throughput? What additional features do you need - IPS, URL filtering, SSL decryption, VPN etc? The more features you enable the less performance, so you'd need to scale for this.

When you know what licensed features you will require your Cisco partner or Cisco account manager can use the NGFW performance estimator tool to identify which hardware will meet your needs.

If the 4100 hardware does not meet your needs, the recently released 4200 hardware has great performance in a 1U chassis (mostly comparable to the 9300 series) or alternatively the 9300, but that hardware is long in the tooth now.

A very basic comparision of the 4200 vs 9300 can be found in the datasheets, note the performance.

https://www.cisco.com/site/us/en/products/security/firewalls/secure-firewall-4200-series/index.html

https://www.cisco.com/site/us/en/products/security/firewalls/firepower-9300-series/index.html

[ERIsci]

can I make any analysis on the current FW to define a number of sessions for example

I reach analysis > active sessions > but gave me sessions from 2021, also I search with the user name but give me anonymous results 

when I reach to analysis > connection event, it gives me million session, is it the target I can count on 

[Aref Alsouqi]

In addition to what @Rob Ingram mentioned, could you please share what limitations/issues you guys are experiencing with the 4110?

[ERIsci]

no Aref we think that the current one SPECS exceeds our needs 

[Aref Alsouqi]

Thanks for clarifying this.

How many users do you have in your environment?

Does the firewall do inter-VLAN routing and inspection?

What type of traffic you guys usually have in both inbound and outbound directions? is it just a normal office work or do you guys have any files transfer or streaming?

Do you have any site-to-site VPNs? if so, how many tunnels? and what type of traffic is flowing over the VPN tunnels?

Do you have remote access VPN configured? if so, how many users could connect?

What security inspections do you guys apply to the passing through traffic? URL filtering? IPS? or is it just L3/L4 inspection?

[Sheraz.Salim]

To add to my question, do you plan to use the firewall in its native form, or does the multi-instance setup not meet with (cpu/ram etc) your requirements? The FTD 4110 is a powerful firewall, classified as an enterprise-grade solution suitable for large-scale business needs.