لایسنس NGFWv

لایسنس سیسکو FirePower FTDv

Cisco-FTDv-License

معرفی فایروال سیسکو FTDv

امروزه مشاغل برای تأمین نیازهای امنیتی شبکه خود به ترکیبی از راه حلهای فیزیکی و مجازی اعتماد می کنند. آنها به انعطاف پذیری برای استقرار فایروال های مختلف فیزیکی و مجازی در طیف وسیعی از محیط ها نیاز دارند در حالی که هنوز سیاست ثابت را در دفاتر شعبه ، مراکز داده شرکت ها و همه نقاط ورود به سیستم حفظ می کنند. نمونه کارها فایروال مجازی سیسکو از تلفیق مرکز داده گرفته تا جابجایی در محل کار ، ادغام و ادغام یا اوج تقاضای فصلی در برنامه های شما ، به راحتی سیاست های یکپارچه و انعطاف پذیری برای استقرار در همه جا به کسب و کارها کمک می کند تا مدیریت امنیت را ساده کنند.

دستگاه Cisco® Next-Generation Firewall Virtual (NGFWv) فایروال شبکه اثبات شده سیسکو را با IPS نسل بعدی پیشرفته ، فیلتر کردن URL و تشخیص بدافزار ترکیب می کند. تهدیدات را به طور خودکار شناسایی و از بین ببرید ، تیم های امنیتی و عملیات شبکه آزاد می شوند. NGFWv همچنین با فعال کردن سیاست های امنیتی سازگار برای پیگیری بارهای شما در محیط های ابری فیزیکی ، خصوصی و عمومی ، محافظت از محیط های مجازی را ساده می کند. برای شناسایی سریع منشا و فعالیت تهدید ، به شبکه خود عمیقاً دسترسی پیدا کنید ، سپس حملات را قبل از تأثیر آنها بر کسب و کارتان متوقف کنید. پیشنهادات فایروال مجازی سیسکو هرگونه تغییر قابل توجه تقاضا در بخش فناوری اطلاعات شما را کاهش می دهد تا بتوانید با کنترل های امنیتی در سطح جهانی از حجم کار خود در برابر تهدیدات پیچیده بیشتر محافظت کنید.

لایسنس سیسکو فایرپاور FTDv مخفف Firepower Threat Defense Virtual Appliance می باشد.نسل بعدی فایروال سیسکو به شما این امکان را می دهد در حالیکه همزمان یک مجموعه منسجم سیاست های امنیتی، قابلیت دید و بهبود عملکرد در پاسخ به تهدیدات را عرضه می کنید، بار ترافیکی (workload) خود را نیز از مجموعه تهدیدهای روز افزون محافظت کنید. با استفاده از قدرت سیسکو زیر ساخت شبکه موجود شما از تمامی مکان ها نظیر مرکز داده ها، شعبات دفاتر، زیر ساخت ابری و هر مکان دیگر، تبدیل به یک راه حل جامع فایروالی شده که منجر به حفظ امنیت پایدار در هر جایی که شما نیاز دارید می شود.

Today, businesses rely on a mixture of physical and virtual solutions to meet their network security needs. They need the flexibility to deploy different physical and virtual firewalls across a wide range of environments while still maintaining consistent policy throughout branch offices, corporate datacenters, and all entry points between. From data center consolidation to office relocations, mergers and acquisitions, or seasonal peaks in demand on your applications, Cisco’s virtual firewall portfolio helps businesses simplify security management with the convenience of unified policy and the flexibility to deploy everywhere.

Cisco® Next-Generation Firewall Virtual (NGFWv) appliance combines Cisco’s proven network firewall with advanced next-gen IPS, URL filtering, and malware detection. Identify and eliminate threats automatically, freeing up security and network operations teams. NGFWv also simplifies protecting virtualized environments by enabling consistent security policies to follow your workloads across physical, private, and public cloud environments. Get deep visibility into your network to quickly detect threat origin and activity, then stop attacks before they impact your business. Cisco virtual firewall offerings mitigate any significant shift in demand on your IT department so you can protect your workloads against increasingly complex threats with world-class security controls.

Product overview

Product overview

NGFWv is the virtualized option of our popular NGFW solution and offers security in traditional physical data centers and private and public clouds. Prioritize threats with automated risk rankings and impact flags to focus your resources on events requiring immediate action. License portability provides the flexibility to move from your on-premises private cloud to a public cloud while maintaining consistent policy and unified management across all of your appliances. Cisco Smart Software Licensing makes it easy to deploy, manage, and track virtual instances of the appliance running on your premises.

Benefits

Get the same power of the NGFW for your public and private clouds with these benefits:

Automated risk ranking and impact flags

Prioritize threats by gaining full visibility over your environment. Reduce the noise and volume of events to hone in on the high-impact items requiring immediate administrator action. Set rule recommendations that correlate host profiles with a level of vulnerability to automate impact analysis and contextualize the data, leveraging the best-of-breed Snort open-source intrusion prevention system (IPS).

License portability across clouds

Deploy appliances everywhere, from your super data center to your branch office, with the portability of one license to support virtual and physical solutions across public or private clouds (VMware, KVM, Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI), government clouds). Expand, contract, or relocate workloads over time and span physical, virtual, and public cloud infrastructures with one license.

Unified management and automated threat correlation

Stop more threats by containing known and unknown malware with leading Advanced Malware Protection (AMP) and URL filtering. Reduce the complexity of managing multiple security products through a unified management of integrated tools.

Features and specifications

Table 1.        Features and specifications for NGFWv

Features

Specifications

Cisco Firepower Device Manager (local management)

ESXi and KVM; Azure: Version 6.5 and above; AWS: 6.6 and above

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Cisco Firepower Management Center (all platforms including on-premises and in AWS, Azure, GCP and OCI(6.7 and above)) or alternatively in the cloud with Cisco Defense Orchestrator (ESXi and KVM; Azure: Version 6.5 and above)

Application Visibility and Control (AVC)

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open-source, application detectors

Standard

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco Firepower Next-Generation Intrusion Prevention System (NGIPS)

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Advanced Malware Protection (AMP) for Networks

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally available.

Cisco AMP Threat Grid sandboxing

Available

URL filtering: number of categories

More than 80

URL filtering: number of URLs categorized

More than 280 million

Automated threat feed and IPS signature updates

Yes: Class-leading Collective Security Intelligence (CSI) from the Cisco Talos® group (https://www.cisco.com/c/en/us/products/security/talos.html)

Third-party and open-source ecosystem

Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats

High availability and clustering

Active/standby (ESXi and KVM only)

Deployment modes

Routed, transparent (inline set — IPS-only), and passive; AWS, Azure, GCP and OCI: routed mode only

Note:      Performance will vary depending on features activated, network traffic protocol mix, and packet size characteristics. Performance is subject to change with new software releases. Consult your Cisco representative for detailed sizing guidance.

Product performance guidelines

Note:      Your performance may vary from the below. These should be considered general guidelines. Your actual performance will depend on your test environment, including CPU type, CPU speed, cache, number of interfaces, etc.

Table 2.        Performance specifications for NGFWv (ESXi/KVM)

Specification

4 vCPU

8 vCPU

12 vCPU

Throughput: FW + AVC (1024B)

3 Gbps

5.5 Gbps

10 Gbps

Throughput: FW + AVC + IPS (1024B)

3 Gbps

5.5 Gbps

10 Gbps

Throughput: FW + AVC (450B)

1.5 Gbps

3 Gbps

5 Gbps

Throughput: FW + AVC + IPS (450B)

1 Gbps

2 Gbps

3 Gbps

Maximum concurrent sessions

100,000

250,000

500,000

Maximum new connections per second

20,000

20,000

40,000

Maximum VPN peers

250

250

750

IPSec VPN throughput(1024B) TCP w/Fastpath)

1.1 Gbps

2 Gbps

4 Gbps

Table 3.        Performance specifications for NGFWv 6.7 and later – AWS

AWS Instance type

c5.xlarge

c5.2xlarge

c5.4xlarge

Throughput: FW + AVC (1024B)

2.2 Gbps

4.3 Gbps

8.6 Gbps

Throughput: FW + AVC + IPS (1024B)

2.2 Gbps

4.3 Gbps

8.4 Gbps

Throughput: FW + AVC (450B)

830 Mbps

1.4 Gbps

3.8 Gbps

Throughput: FW + AVC + IPS (450B)

830 Mbps

1.4 Gbps

3.2 Gbps

Maximum concurrent sessions

100,000

200,000

2M

Maximum new connections per second

24,500

45,900

82,800

Maximum VPN peers

250

250

10,000

IPSec VPN throughput(1024B) TCP w/Fastpath)

1.4 Gbps

1.4 Gbps

4 Gbps

Table 4.        Performance specifications for NGFWv 6.7 and later- Azure*

Azure VM type

D3_v2

D4_v2

D5_v2

Throughput: FW + AVC (1024B)

1.4 Gbps

1.4 Gbps

2.1 Gbps

Throughput: FW + AVC + IPS (1024B)

1.4 Gbps

1.4 Gbps

2.1 Gbps

Throughput: FW + AVC (450B)

450 Mbps

450 Mbps

550 Mbps

Throughput: FW + AVC + IPS (450B)

450 Mbps

450 Mbps

540 Mbps

Maximum concurrent sessions

100,000

250,000

1.5M

Maximum new connections per second

11,550

12,480

14,540

Maximum VPN peers

250

250

10,000

IPSec VPN throughput (1024B) TCP w/Fastpath)

839 Mbps

1.6 Gbps

2.7 Gbps

*Measured on instances with Accelerated Networking (AN) enabled.

Table 5.        Performance specifications for NGFWv 6.7 and later- GCP

GCP machine type

c2-standard-4

c2-standard-8

c2-standard-16

Throughput: FW + AVC (1024B)

1.5 Gbps

5.1 Gbps

9.9 Gbps

Throughput: FW + AVC + IPS (1024B)

1.4 Gbps

5.4 Gbps

9.7 Gbps

Throughput: FW + AVC (450B)

450 Mbps

1.7 Gbps

2.3 Gbps

Throughput: FW + AVC + IPS (450B)

630 Mbps

1.2 Gbps

2.1 Gbps

Maximum concurrent sessions

100,000

250,000

2M

Maximum new connections per second

12,000

45,000

84,000

Maximum VPN peers

250

250

10,000

IPSec VPN throughput (1024B) TCP w/Fastpath)

1.5 Gbps

1.5 Gbps

4.1 Gbps

Table 6.        Performance specifications for NGFWv 6.7 and later- OCI*

OCI Shape type

VM.Standard2.4

VM.Standard2.8

Throughput: FW + AVC (1024B)

1.2 Gbps

2.4 Gbps

Throughput: FW + AVC + IPS (1024B)

1.2 Gbps

2.4 Gbps

Throughput: FW + AVC (450B)

410 Mbps

920 Mbps

Throughput: FW + AVC + IPS (450B)

390 Mbps

910 Mbps

Maximum concurrent sessions

250,000

2M

Maximum new connections per second

4900

10,000

Maximum VPN peers

250

10,000

IPSec VPN throughput (1024B) TCP w/Fastpath)

1.2 Gbps

1.5 Gbps

*Measured with paravirtualized interfaces.

System requirements

Table 7.        System requirements for NGFWv

Specification

Description

VMware and KVM: Virtual CPUs and memory (6.4 and above)

●  4 vCPU/8GB
●  8 vCPU/16GB
●  12 vCPU/24GB

VMware and KVM: Virtual CPUs and memory (6.3 and earlier)

4 vCPU/8GB

Storage

50GB for all FTDv configurations

Hypervisor support

ESXi 6.0, 6.5, 6.7; KVM

AWS Support

●  Instances: c3.xlarge, c4.xlarge
●  Instances: c5.xlarge, c5.2xlarge, & c5.4xlarge (6.6 and above)
●  Gov Marketplace
●  China Marketplace
●  Auto-Scale
●  Enhanced Networking

Azure Support

●  Instances: D3, D3_v2,
●  Instances: D4_v2 and D5_v2 (6.5 and above)
●  Gov Marketplace
●  China Marketplace
●  Auto-Scale
●  Accelerated Networking

GCP Support (6.7 and above)

●  Instances: c2-standard-4, c2-standard-8, c2-standard-16, n1-standard-4, n1-standard-8, n1-standard-16, n2-standard-4, n2-standard-8, n2-standard-16, n1-highcpu-8, n2-highcpu-8, n1-highcpu-16, n2-highmem-4, n2-highmem-8, n2-highmem-16, n2-highcpu-16

OCI Support (6.7 and above)

●  Instances: VM.Standard2.4, VM.Standard2.8

Ordering information

Table 8.        Ordering information for NGFWv

Part number

Description

FPRTD-V-K9

Cisco Firepower Threat Defense (TD) Virtual Appliance

L-FPRTD-V-T

Cisco Firepower TD Virtual Threat Protection

L-FPRTD-V-TM

Cisco Firepower TD Virtual Threat and Malware Protection

L-FPRTD-V-TC

Cisco Firepower TD Virtual Threat Protection and URL

L-FPRTD-V-TMC

Cisco Firepower TD Virtual Threat, Malware, and URL Filtering

L-FPRTD-V-AMP

Cisco Firepower TD Virtual Malware Protect

L-FPRTD-V-URL

Cisco Firepower Threat Defense Virtual URL Filtering

Cisco environmental sustainability

Information about Cisco’s environmental sustainability policies and initiatives for our products, solutions, operations, and extended operations or supply chain is provided in the “Environment Sustainability” section of Cisco’s Corporate Social Responsibility (CSR) Report.

Reference links to information about key environmental sustainability topics (mentioned in the “Environment Sustainability” section of the CSR Report) are provided in the following table:

Sustainability topic

Reference

Information on product material content laws and regulations

Materials

Information on electronic waste laws and regulations, including products, batteries, and packaging

WEEE compliance

نوشته های مرتبط

دیدگاهتان را بنویسید

نشانی ایمیل شما منتشر نخواهد شد. بخش‌های موردنیاز علامت‌گذاری شده‌اند *