Clarity on specifications of CIsco Firewalls

[Security12]

Hi How do i know/ calculate threat protection throughput of Cisco firewall 4215?

https://www.cisco.com/c/en/us/products/collateral/security/firewalls/secure-firewall-4200-ds.html

Please suggest if "throughput: FW + AVC + IPS" is considered as threat protection throughput, i double malware protection throughput is not included in this calculation and as per my understanding, Malware protection throughput must be part of this?

please suggest

[M02@rt37]

Hello @Security12 

The "throughput: FW + AVC + IPS" value generally represents the combined performance when all these security features (firewall, AVC, and IPS) are active simultaneously. However, it's important to note that this value may not include every security feature available on the firewall.

For a comprehensive threat protection calculation, you would ideally want to consider the combined throughput of all relevant security services, including firewall, AVC, IPS, and malware protection. Malware protection typically involves additional processing for tasks such as file inspection, sandboxing, and antivirus scanning.

[Security12]

thank you i understand this. However, i dont see any exclusively written throughput for malware protection so i am able to add all services throughput and come up with a certain throughput for threat protection.

if you see competitors, most of them exactly mentioned xyz throughput as their threat protection throughput. how do i know this in case of Cisco?

regards

[M02@rt37]

@Security12 

You could still estimate the overall threat protection throughput by combining the throughputs of individual services, such as firewall, AVC, and IPS. While this won't provide a dedicated malware protection throughput figure, it can give you an idea of the firewall's overall performance when multiple security services are active.

[MHM Cisco World]

There is no exact algorithm to calculate throughput with multi op. FW have' but the happy news you can add throughput later if you reach high limit.

MHM

[Security12]

for sake of procurement, how would i ask a certain threat protection throughput for a Cisco Firewall? say Cisco 4215?

One more thing, TLS hardware decryption throughput can be regarded same as SSL inspection throughput?

[MHM Cisco World]

https://www.cisco.com/c/en/us/products/collateral/security/firepower-4100-series/datasheet-c78-742474.html

Check this guide 

MHM

[Security12]

i heard 4100 is now discontinued so i am considering 4200 series.

https://www.cisco.com/c/en/us/products/collateral/security/firewalls/secure-firewall-4200-ds.html
these data sheets are in consideration

however, i want to know threat protection throughput of 4200 series firewalls (4215,4225,4245)
also, i want clarity if SSL inspection throughput can be regarded same as TLS HW encryption? 

i am working on a procurement document

[Rob Ingram]

@Security12 you should work with your Cisco partner who will have access to the Cisco NGFW performance estimator tool (there is no general access to the public). This tool will more accurately determine the performance of the model of device with the different  features (FW, AVC, IPS, SSL, NAT, encryption etc) enabled.