question about a guide to how to buy a Firepower

[JunSungKim2765]

Hi, everyone

I don't know which firepower to buy.
If switching fabric bandwidth 50G, which firepower should i buy?
I mean a firepower will substitutes a switch.

thank you

best regards

[ccieexpert]

hi

a Firepower is not a switch but you can make it kind of like a switch with bridged interface BVI.

the firepower 4145 and 9300 can do it... a 9300 maybe better as IRB does not work with firewall clustering.

check the datasheet for interface density and also performance with all feature set..

https://www.cisco.com/c/en/us/products/collateral/security/firepower-4100-series/datasheet-c78-742474.html

https://www.cisco.com/c/en/us/products/collateral/security/firepower-9000-series/datasheet-c78-742471.html

[Marius Gunnerud]

In addition to what @ccieexpert has mentioned, here is an ordering guide and a link to licensing information.

https://www.cisco.com/c/en/us/products/collateral/security/secure-firewall/guide-c07-737902.html

https://www.cisco.com/c/en/us/support/security/firepower-ngfw/products-licensing-information-listing.html

[MHM Cisco World · Accepted solution]

The SW use fabric and FW use Throughput

And throughput depend one which policy will ypu use 

MHM

[Marvin Rhoads]

Don't substitute a firewall costing US$100s of thousands for what can be done with a $20k switch. You won't be happy with the outcome.