Transcription
FirePower 2100 NGFWElodie Heurtevent – Security BDM Commercial21 March 2017
Capture the NGFW Opportunity"Less than 40% of enterprise Internetconnections today are secured using nextgeneration firewalls (NGFWs).”“By year-end 2018, this will rise to at least 85%of the installed base, with 90% of newenterprise-edge purchases being NGFWs asmore enterprises realize the benefits ofapplication and user control.”Source: Framework for Migrating to a Next-Generation Firewall; Gartner, 2015Security now a boardroom issue.EMEAR Opportunity Competitive Take-Out*: 1.092 B ASA Midrange Refresh: 760M opportunity TOTAL: 1.852 B*Source: IDC Security Appliance Tracker,Top 4 vendors units 3 years oldThe market needs threat defense. 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Business resiliency requires security, but Security hasn’t scaledas fast as your networkIt’s costly and complexto deploy and maintainIneffective securitydoesn’t stop malwareMust overprovisionto avoid performanceproblems 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Business resiliency through superior threat defenseIntroducing the Firepower 2100 Series NGFWSuperior Industry-best threatprotection andrapid breach detectionThreat inspection withminimal throughputimpactEasier management,lower operatingcosts 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Firepower 2100 SeriesFPR 2140Firepower210012x 1G 12x 10G PortHigh Performance, Purpose BuiltHardware for Cisco NGFWFPR 2130 12x-1G 12x 10G PortFirepower2100Available in 4 PlatformsFPR 2120 16x 1G PortFirepower2100Higher Port Density in 1 Rack UnitFPR 2110 16x 1G PortFirepower210010 Gbps Support (2130 and 2140) 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
New NGFWs with leading price performanceModels 2110 & 2120Models 2130 & 2140Low-cost, high–performance NGFW1RU, Fixed 16-port 1GbEconnectivityHigh-performance, 1 RU NGFWNetwork modularity, up to 24-port1GbE and 12 10GbE connectivity1.9 to 8.5 Gbps FW AVC IPS throughput 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
With leading security effectivenessCisco Firepower 2100 Series NGFWs deliver:Models 2110 & 2120Low-cost, high–performance NGFW1RU, Fixed 16-port 1GbE connectivityModels 2130 & 2140High–performance, 1 RU NGFWNetwork modularity, up to 24-port 1GbEand 12-port 10GbE connectivitySuperior nced threatdetectionUp to 8.5 Gbps FW IPSSustains throughputperformance as threatinspection services areaddedIntegrates CiscoFirepower NGIPS andCisco AMPLess than 50% of thecost per-protected Mbpsvs. competitors200% greaterthroughput vs.competitors when IPS isenabledDual multi-core CPUsRanked #1 in breachdetection by NSS LabsFuture-proofs yourinvestmentSuperior TTD ofadvanced threats 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Firepower 2100 delivers scalable performanceSustains performance when security services like NGIPS are enabledLarge Packet Throughput Comparison* — Midrange NGFWsServicesCisco Firepower2100 SeriesCompetitor “A”Competitor “B”Competitor “C”FW AVC1.9 - 8.5 Gbps2.0 – 4.0 Gbps2.0 – 3.0 Gbps2.5 – 7.0 GbpsFW AVC IPS1.9 – 8.5 Gbps1.0 – 2.0 Gbps1.0 – 1.5 Gbps1.7 – 3.5 GbpsThroughputDegradation 0%- 50%- 50%- 50%(vs. FW AVC)Sustains performanceCompeting solutions can’t keep up*Source: 1024byte or larger TCP throughput from datasheets for each respective vendor. 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Ordering and Subscriptions1AppliancesModel3BASEPRICEFirepower 2110 NGFW 10,995.00Firepower 2120 NGFW 19,995.00Firepower 2130 NGFW 29,995.00Firepower 2140 NGFW 64,995.00Threat-TSubscriptions (1, 3, 5 hreat-TM-TC-TMCMalwareURL-AMP -URL(License PID Identifiers)BASEPRICEFPR2110 Threat, Malware and URL 3 Years 13,460.00FPR2120 Threat, Malware and URL 3 Years 24,475.00FPR2130 Threat, Malware and URL 3 Years 36,715.00FPR2140 Threat, Malware and URL 3 Years 79,555.00Simple Ordering1) Size and Select Appliance2) Lead with “TMC” Threat Subscription3) 3 & 5 Year Terms Best Value 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
When to lead with whatFirepower 2100 Series5525-X 5545-X 5555-XInternet Edge NGFW applications forthreat inspection/protectionCustomer insists on ASA orwhere specific functions are required; Application Visitiblity & ControlNext-gen IPSURL FilteringAdvanced Malware Protection Multi-contextActive – Active FailoverClustering supportFlexConfig can help address somespecific routing protocols 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Firepower NGFW Offering2100 Series4100 Series9300 ApplianceVirtual AppliancesBest price-performanceNGFW for Internet Edge,10 GbE connectivity,1.9 - 8.5 Gbps throughput*High-performance 1RUNGFW for Data Center,40 GbE connectivity,10 - 24 Gbps throughput*Carrier-class performanceNGFW for Campus andService Providers,24 - 133 Gbps throughput*Scalable performanceNGFW for Data Centers andCloud Service ProvidersFor VMware, Xen, AWS, AzureSuperior Threat Defense: FW, AVC, NGIPS, URL, AMP, DDoS* Throughput with FW AVC IPS enabled on Firepower Threat Defense
Management designed for the userOn-boxCentralizedFirepower DeviceManagerFirepower ManagementCenterEnables easy on-boxmanagement ofcommon security andpolicy tasksEnables comprehensivesecurity administrationand automation ofmultiple appliancesCloud-basedCisco DefenseOrchestratorEnables cloud-basedpolicy management ofmultiple deployments 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
EMEAR Security Partner Community: https://communities.cisco.com/docs/DOC63689 More features details: epower2100-series/index.html Migration llateral/security/mig-guide-en.pdf Cisco Network Security Ordering Presentation ID 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public13
Thank You
Cisco Public With leading security effectiveness Cisco Firepower 2100 Series NGFWs deliver: Superior midrange price-performance Optimized architecture Advanced threat detection Sustains throughput performance as threat inspection services are added Dual multi-core CPUs Future-proofs your investment Integrates Cisco Firepower NGIPS and Cisco AMP
