What's the difference between Cisco NGFW(2000,4000,9000) and NGIPS(7000,9000)?

[Mark_Zhang]

Hello everyone, What's the difference between Cisco NGFW(2000,4000,9000) and NGIPS(7000,9000), In my opinion  NGFW(like Firepower4000) can achieve the IPS function by the corresponding license.  

Is there anyone can tell me what's the difference ?

[Ashish Jhaldiyal]

Cisco NGFW (2000,4000,9000) are new Firepower Threat Defense firewalls which includes ASA and SourceFire IPS in one image.

NGIPS(7000,9000) are dedicated IPS sensors without ASA.

Yes you can enable IPS, URL, AMP and AVC features on 2000,4000 and 9000 FTD series firewall with corresponding licenses.

Ashish

[Mark_Zhang]

Ashish:

Thanks for your reply, by the way, what special things can FTD do than NGIPS?   Is FTD similar to traditional ASA software ?    Can it be configured by CLI ? 

Mark 

[Ashish Jhaldiyal · Accepted solution]

FTD can do Dynamic routing, anyconnect in the next release.  There is a CLI in FTD to run show commands but configuration is done through GUI. 

Ashish