Cisco recently announced two high-end next generation firewalls primarily for service providers and data centers.
Based on data released from Cisco I have filled out the voids with my own tentative data.
If you find any data that is proved incorrect, please contact me and I will edit it.
Firepower 4100
In the front is two network module bays and two SSD bays. Only one SSD bay is used by default. Six hot-swappable fans and two power supply’s in the back.
Applications:
ASA
Firepower Threat Defense
Decorations:
For 4120, 4140 and 4150 - Radware DefensePro DDoS Mitigation
Supervisor
8x 10GE SFP+ ports
Management processor: Gladden 2.0GHz (Pentium B925C 2 physical cores/4 logical cores)
Management memory: 8GB DDR3 1600MHz RDIMM
Management SSD: Unknown
Backplane: Broadcom StrataXGS® Trident II
Backplane model: BCM56854A0IFSBG 720Gbit/s
4110
12 physical cores (24 logical cores) Single 12 core Xeon E5-2658v3 2.2GHz
64GB DDR4 2133MHz RAM
One disk 200GB SSD storage + one optional for AMP
One Smart NIC - Cruz custom Cisco FPGA
One Crypto Accelerator - Cavium Nitrox III CNN53550-500-C20
4120
24 physical cores (48 logical cores) Dual 12 core Xeon E5-2658v3 2.2GHz
128GB DDR4 2133MHz RAM
One disk 200GB SSD storage + one optional for AMP
Two Smart NIC - Cruz custom Cisco FPGA
Two Crypto Accelerator - Cavium Nitrox III CNN3550-500-C20
4140
36 physical cores (72 logical cores) Dual 18 core Xeon E5-2699v3 2.3GHz
256GB DDR4 2133MHz RAM
One disk 400GB SSD storage + one optional for AMP
Two Smart NIC - Cruz custom Cisco FPGA
Two Crypto Accelerator - Cavium Nitrox III CNN3550-500-C20
4150
44 physical cores (88 logical cores) Dual 22 core Xeon E5-2699v4 2.2GHz
256GB DDR4 2400MHz RAM
One disk 400GB SSD storage + one optional for AMP
Two Smart NIC - Cruz custom Cisco FPGA
Two Crypto Accelerator - Cavium Nitrox III CNN3550-500-C20
Firepower 9300
Can contain one supervisor with up to two network modules, three security modules (blades) of one kind (either SM24, SM36 or SM44) and two power supply’s in the front.
In the back there is 4 hot-swappable fans.
Applications:
ASA
Firepower Threat Defense
Decorations:
Radware DefensePro DDoS Mitigation
- Up to 10GBps per module on 6 dedicated x86 CPU cores
- Impact on ASA throughput is 10-15%
Supervisor
8x 10GE SFP+ ports
Management processor: Unknown
Management memory: 32GB DDR4 2133MHz
Management SSD: Micron M500 mSATA 120GB
Backplane: Broadcom StrataXGS® Trident II
Backplane model: BCM56852A0KFSBG 960Gbit/s
9300 Security Module 24 - Enterprise
24 physical cores (48 logical cores) Dual 12 core Xeon E5-2658v3 2.2GHz (2.9GHz turbo)
256GB DDR4 RAM 2133MHz RDIMM
Two 800GB SSDs in RAID1
Two Smart NIC – Cruz custom Cisco FPGA
Two Crypto Accelerator - Cavium Nitrox III CNN3550-500-C20
9300 Security Module 36 - Extreme
36 physical cores (72 logical cores) Dual 18 core Xeon E5-2699v3 2.3GHz (3.6GHz turbo)
256GB DDR4 RAM 2133MHz RDIMM
Two 800GB SSDs in RAID1
Two Smart NIC – Cruz custom Cisco FPGA
Two Crypto Accelerator - Cavium Nitrox III CNN3550-500-C20
9300 Security Module 44
44 physical cores (88 logical cores) Dual 22 core Xeon E5-2699v4 2.2GHz (3.6GHz turbo)
256GB DDR4 RAM 2400MHz RDIMM
Two 800GB SSDs in RAID1
Two Smart NIC – Cruz custom Cisco FPGA
Two Crypto Accelerator - Cavium Nitrox III CNN3550-500-C20
Notes
- Cisco announced that the security modules running ASA will use the processors turbo mode when 25% of the cores hit 80% CPU load. This will be disabled again when all ASA cores drop below 60% load.
- I am unable to find any information about the management processor on the Firepower 9300 chassis and the management SSD on the 4100.
