Cisco Firepower 2100 Series User Manual

The Cisco Firepower 2100 series security appliance includes the Firepower 2110, 2120, 2130, and 2140.

Firepower 2110/2120 and Firepower 2130/2140

  • Hot Sauce challenge to kick off Cisco's new Firepower 2100 series Next Generation Firewall.
  • The Cisco Firepower 2100 Series provides 4 platforms. Model Firewall NGFW NGIPS Interfaces Optional interfaces FPR-2110 3G 2.3G 2.3G 12 x RJ45, 4 x SFP N/A FPR-2120 6G 3G 3G 12 x RJ45, 4 x SFP N/A FPR-2130 10G 5G 5G 12 x RJ45, 4 x SFP+ 10G SFP+, 1/10G FTW.
Cisco Firepower 2100 Series User Manual

With the 2100 Series, security doesn't come at the expense of network throughput. Firepower's innovative architecture optimizes simultaneous firewall, cryptographic, and threat inspection performance, keeping you in command of network performance.

Cisco Firepower 2100 Series Features

The following table lists the features for the Firepower 2100 series.

Compare Features of Firepower 2110, 2120, 2130, and 2140

Feature2110212021302140
Form factor1 RU (fits standard 19-in. (48.3-cm) square-hole rack)
Rack mountableYes

2 two-post mount brackets

(Optional) 4-post EIA-310-D rack

Yes

4-post EIA-310-D rack

(Optional) 2-two-post mount brackets

AirflowFront to rear (cold aisle to hot aisle)
Intel x86 processorSingle 4-core at 1.8GSingle 6-core at 1.9GSingle 8-core at 2.0GSingle 16-core at 1.3G
Intel x86 memory16 GB32 GB64 GB
Cavium Network Processor Unit (NPU)Single 6-core at 1.2GSingle 8-core at 1.2GSingle 12-core at 1.2GSingle 16-core at 1.8G
Cavium NPU RAM8G16G
Flash8G (nominal)
Maximum number of interfaces1624
Management port1 Gigabit Ethernet (10M/100M/1G Base-T)
Console portRJ-45 serial port
USB portType A 2.0 (500mA)
Network ports12 fixed RJ-45 1G/100M/10M ports (named Ethernet 1/1 through 1/12 )
Small Form-Factor Pluggable (SFP) ports4 fixed 1G SFP ports4 fixed 1G/10G SFP+ ports
Pullout label cardYes (displays serial number)
Grounding lugYes
Locator beaconYes
Power switchYes
Network modulesNo1 network module slot

Not hot swappable

AC power supply1 fixed AC power supply module2 power supply slots

Ships with one 400W AC power supply

Hot swappable

2 power supply slots

Ships with two 400W AC power supplies

Hot swappable

DC power supplyNoYes (optional)
Redundant powerNoYes
Fan4 fixed fans1 hot-swappable fan tray with 4 fans
Storage2 SSD slots (100GB )

Ships with one 100GB SSD installed in slot 1. The second slot is reserved for the MSP SSD.

2 SSD slots (200GB )

Ships with one 200GB SSD installed in slot 1. The second slot is reserved for the MSP SSD.

Malware Storage Pack (MSP)Yes (installed in SSD slot 2)
Cisco Firepower 2100 Series-Deployment Options

You can deploy the Firepower 2100 in the following ways:

  • As a firewall:
    • At the enterprise Internet edge deployed in a high availability configuration
    • At branch offices in either an HA pair or standalone
  • As a device that provides additional application control, URL filtering, or IPS/threat-centric capabilities:
    • Behind an enterprise Internet edge firewall in an inline in a transparent bump-in-the-wire configuration or as a standalone (requires hardware fail open network module support)
    • Deployed passively off a SPAN port on a switch or a tap on a network, or standalone
  • As a VPN device:
    • For remote access VPN
    • For site-to-site VPN
Supported SFP/SFP+ Transceivers

First of all you should take note of the following warnings:

  • Warning: Statement 1053—Class 1M Laser Radiation; Class 1M laser radiation when open. Do not view directly with optical instruments.
  • Warning: Statement 1055—Class I and Class 1M Laser; Class I (CDRH) and Class 1M (IEC) laser products.
  • Warning: Statement 1056—Unterminated Fiber Cable

Invisible laser radiation may be emitted from the end of the unterminated fiber cable or connector. Do not view directly with optical instruments. Viewing the laser output with certain optical instruments (for example, eye loupes, magnifiers, and microscopes) within a distance of 100 mm may pose an eye hazard.

  • Warning: Statement 1057—Hazardous Radiation Exposure

Use of controls or adjustments or performance of procedures other than those specified may result in hazardous radiation exposure.

Cisco Firepower 2100 Series Datasheet

The SFP/SFP+ transceiver is a bidirectional device with a transmitter and receiver in the same physical package. It is a hot-swappable optical or electrical (copper) interface that plugs into the SFP/SFP+ ports on the fixed ports and the network module ports, and provides Ethernet connectivity.

SFP
Cisco Firepower 2100 Series User Manual
1Dust plug2Bail clasp
3Receive optical bore4Transmit optical bore
  1. Warning:Use appropriate ESD procedures when inserting the transceiver. Avoid touching the contacts at the rear, and keep the contacts and ports free of dust and dirt. Keep unused transceivers in the ESD packing that they were shipped in.
  2. Note:The 1G transceivers are limited to 1GB operation only (no auto-negotiation support). 100M/10M modes are not supported.
  3. Caution:Although non-Cisco SFPs are allowed, we do not recommend using them because they have not been tested and validated by Cisco. Cisco TAC may refuse support for any interoperability problems that result from using an untested third-party SFP transceiver.
Supported SFPs

The following table lists the supported transceivers.

Optics Type
PID
Ports Supported
SFP 1G
1G-SXGLC-SX-MMDPorts 13 through 16

Ports 1 though 8 of the 8X10G network module (available only on the 2130 and 2140)

1G-LHGLC-LH-SMD
1G-EXGLC-EX-SMD
1G-ZXGLC-ZX-SMD
1G 1000Base-TGLC-T
1G 1000Base-TGLC-TE
SFP+ 10G
10G-SRSFP-10G-SRPorts 13 through 16

Ports 1 though 8 of the 8X10G network module (available only on the 2130 and 2140)

10G-LRSFP-10G-LR
10G-LRMSFP-10G-LRM
10G-ERSFP-10G-ER
10G-SR-SSFP-10G-SR-S
10G-LR-SSFP-10G-LR-S
10G-ZR-SSFP-10G-ZR-S
10G-ER-SSFP-10G-ER-S
H10GB-CU 1M, 1.5M, 2M, 2.5M, 3M, 5MSFP-H10GB-CU1M

SFP-H10GB-CU1-5M

SFP-H10GB-CU2M

SFP-H10GB-CU2-5

SFP-H10GB-CU3M

SFP-H10GB-CU5M

H10GB-ACU 7M, 10MSFP-H10GB-ACU7M

SFP-H10GB-ACU10M

10G-AOC 1M, 2M, 3M, 5M, 7M, 10MSFP-10G-AOC1M

SFP-10G-AOC2M

SFP-10G-AOC3M

SFP-10G-AOC5M

SFP-10G-AOC7M

SFP-10G-AOC10M

Get the Best Prices on Cisco SFP GLC Modules

Hardware Specifications for the Firepower 2100 series

Cisco Firepower 2100 Series User Manual Free

UserCisco Firepower 2100 Series User Manual

The following table contains hardware specifications for the Firepower 2100 series security appliance.

Specification
2110
2120
2130
2140
Physical
Form factor1 RU (fits standard 19-in. (48.3-cm) square-hole rack)
Rack mountableYes

Fixed 2-post mount brackets included

Optional: 4-post EIA-310-D mount rails

Yes

4-post EIA-31-D mount rails included

Optional: 2-post mount brackets

Dimensions (H x W x D)1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm)
Weight16.1 lb (7.3 kg)19.4 lb (8.79 kg)21 lb (9.52 kg)
Storage
SSD100 GB
Note The storage SSD must be installed in slot 1.
200 GB
Note The storage SSD must be installed in slot 1.
MSP800 GB
Note The MSP SSD must be installed in slot 2.
Memory
DDR4 DRAM16 GB16 GB32 GB64 GB
Power
System power100/240VAC 1.9A (at 100VAC), 50 to 60 Hz
Note The power supply module is rated at 4A, but the system power is limited to 1.9A.
100/240VAC 2.9A (at 100VAC), 50 to 60 Hz
Note The power supply module is rated at 6.3A, but the system power is limited to 2.9A.
Power supply moduleACAC or DC
Redundant power supplyNoYes
Environmental
TemperatureOperating: 32⁰ to 104⁰F (0 to 40⁰C)

Nonoperating: -40 to 149°F (-40 to 65°C) maximum altitude is 40,000 ft

NEBSOperating altitude: 0 to 13,000 ft (3962 m)

Operating temperature:

  • Long Term: 0 to 45°C up to 6000 ft (1829 m)
  • Long Term: 0 to 35°C 6000-13000 ft (1829-3964 m)
  • Short Term: -5 to 55°C up to 6000 ft (1829 m)
Note Firepower 2100 series NEBS Compliance applies only to the 2130.
Note NEBS operation is not supported when the 8X10G (FPR-NM-8x10G) network module is installed.
HumidityOperating: 10 to 85 percent noncondensing

Nonoperating: 5 to 95 percent noncondensing

AltitudeOperating: 10,000 ft maximum

Nonoperating: 40,000 ft maximum

Acoustic Noise
Sound pressure47.3 dBA (typical)

73.4 dBA (maximum)

55.7 dBA (typical)

76.7 dBA (maximum)

Sound power60.2 (typical)

85.1 (maximum)

66 (typical)

84.5 (maximum)

Air flowFront to back
System Cooling Requirements

Get the Best Prices on Cisco Firepower 2100 Series

More Related

Besides Cisco ASA5500 series firewalls, we know there are also FirePOWER series, like FirePOWER 1000, FirePOWER 2100, FirePOWER 4100, etc. Unlike ASA5500 which is only one series, FirePOWER provide various sub series, what are their differences? Let’s compare.

Firepower

Overview of FirePOWER 1000

Cisco Firepower 1000 Series is a family of three threat-focused Next-Generation Firewall (NGFW) security platforms that deliver business resiliency through superior threat defense. It offers exceptional sustained performance when advanced threat functions are enabled. The 1000 Series’ throughput range addresses use cases from the small office, home office, remote branch office to the Internet edge. The 1000 Series platforms run Cisco Firepower Threat Defense (FTD).

Cisco Firepower 1000 Series summary

ModelNGFWNext-Generation Intrusion Prevention System (NGIPS)Interfaces
FPR-1010650 Mbps650 Mbps8 x RJ45
FPR-11201.5 Gbps1.5 Gbps8 x RJ45, 4 x SFP
FPR-11402.2 Gbps2.2 Gbps8 x RJ45, 4 x SFP

Overview of FirePOWER 2100

Cisco Firepower 2100 Series NGFW appliances deliver business resiliency through superior threat defense. They provide sustained network performance when threat inspection features are activated to keep your business running securely. And they are now simpler to manage for improved IT efficiency and a lower total cost of ownership.

Cisco Firepower 2100 series summary:

ModelFirewallNGFWNGIPSInterfacesOptional interfaces
FPR-21103G2.3G2.3G12 x RJ45, 4 x SFPN/A
FPR-21206G3G3G12 x RJ45, 4 x SFPN/A
FPR-213010G5G5G12 x RJ45, 4 x SFP+10G SFP+, 1/10G FTW
FPR-214020G9G9G12 x RJ45, 4 x SFP+10G SFP+, 1/10G FTW

Overview of FirePOWER 4100

Stop more threats with our fully integrated next-generation firewall (NGFW) appliance. The 4100 Series’ 1-rack-unit size is ideal at the Internet edge and in high-performance environments. It shows you what’s happening on your network, detects attacks earlier so you can act faster, and reduces management complexity.

Cisco Firepower 2100 Series User Manual Pdf

Cisco Firepower 4100 Series summary:

ModelFirewallNGFWNGIPSInterfacesOptional Interfaces
FPR-411035G11G15G8 x SFP+ on-chassis2 x NM’s: 1/10/40G, FTW
FPR-4115(New)80G26G27G8 x SFP+ on-chassis2 x NMs: 1/10/40G, FTW
FPR-412060G19G27G8 x SFP+ on-chassis2 x NM’s: 1/10/40G, FTW
FPR-4125(New)80G35G41G8 x SFP+ on-chassis2 x NMs: 1/10/40G, FTW
FPR-414070G27G38G8 x SFP+ on-chassis2 x NM’s: 1/10/40G, FTW
FPR-4145(New)80G45G55G8 x SFP+ on-chassis2 x NMs: 1/10/40G, FTW
FPR-415075G39G52G8 x SFP+ on-chassis2 x NM’s: 1/10/40G, FTW

Performance Comparison of Cisco FirePOWER Series

FeaturesFirePOWER 1000FirePOWER 2100FirePOWER 4100
Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B)650 Mbps-2.2 Gbps2.3 Gbps-9 Gbps13 Gbps-45 Gbps
Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B)650 Mbps-2.2 Gbps2.3 Gbps-9 Gbps11 Gbps-39 Gbps
Maximum concurrent sessions, with AVC100K-400K1-3 million10-30 million
Maximum new connections per second, with AVC6K-22K14K-57K64K-263K
Transport Layer Security (TLS)150 Mbps-1 Gbps365 Mbps-1.4 Gbps4.5 Gbps-7.5 Gbps
Throughput: NGIPS (1024B)650 Mbps-2.2 Gbps2.3 Gbps-9 Gbps15 Gbps-52 Gbps
IPSec VPN throughput (1024B TCP w/Fastpath)300 Mbps-1.2 Gbps800 Mbps-3.2 Gbps6 Gbps-14 Gbps
Maximum VPN Peers75-4001500-1000010000-20000
Cisco Firepower Device Manager (local management)YesYesYes

Cisco Firepower 2100 Series User Manual

Price Comparison of Cisco FirePOWER Series

Of course, the higher level, the more expensive. Here shares you the GPL.

ProductDescriptionList Price (USD)
FPR1140-NGFW-K9Cisco Firepower 1140 NGFW Appliance, 1U$7,495.00
FPR1120-NGFW-K9Cisco Firepower 1120 NGFW Appliance, 1U$4,495.00
FPR2110-NGFW-K9Cisco Firepower 2110 NGFW Appliance, 1U$10,995.00
FPR2130-NGFW-K9Cisco Firepower 2130 NGFW Appliance, 1U, 1 x NetMod Bay$29,995.00
FPR2120-NGFW-K9Cisco Firepower 2120 NGFW Appliance, 1U$19,995.00
FPR2140-NGFW-K9Cisco Firepower 2140 NGFW Appliance, 1U, 1 x NetMod Bay$64,995.00
FPR4140-NGFW-K9Cisco Firepower 4140 NGFW Appliance, 1U, 2 x NetMod Bays$209,995.00
FPR4120-NGFW-K9Cisco Firepower 4120 NGFW Appliance, 1U, 2 x NetMod Bays$149,995.00
FPR4110-NGFW-K9Cisco Firepower 4110 NGFW Appliance, 1U, 2 x NetMod Bays$89,995.00
FPR4115-NGFW-K9Cisco Firepower 4115 NGFW Appliance, 1U, 2 x NetMod Bays$119,995.00
FPR4125-NGFW-K9Cisco Firepower 4125 NGFW Appliance, 1U, 2 x NetMod Bays$189,995.00
FPR4150-NGFW-K9Cisco Firepower 4150 NGFW Appliance, 1U, 2 x NetMod Bays$249,995.00

*Check More GPL at itprice.com.

Cisco Firepower 2100 Installation Guide

If you have any questions, please leave your comments.

Cisco Firepower 2100 Series User Manuals Pdf

Learn More:

Cisco Firepower 2100 Series User Manual Online

Info: