Cisco Firepower 4100 Series Manual
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
First Published: 2016-03-31
Last Modified: 2018-11-16
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
©2016-2018 Cisco Systems, Inc. All rights reserved.
CONTENTS
Overview 1
CHAPTER 1
Features 1
Deployment Options 4
Package Contents 4
Serial Number Location 5
Front Panel 6
Front Panel LEDs 7
Rear Panel 8
Network Modules 10
10-G Network Module 10
40-G Network Module 11
Hardware Bypass Network Modules 12
1-G Network Module with Hardware Bypass 13
40-G Network Module with Hardware Bypass 14
1-G SX/10-G SR/10-G LR Network Module with Hardware Bypass 16
Power Supply Modules 18
Fan Modules 20
Supported SFP/SFP+ and QSFP Transceivers 21
Hardware Specifications 23
Product ID Numbers 25
Power Cord Specifications 28
Installation Preparation 35
CHAPTER 2
Installation Warnings 35
Safety Recommendations 37
Maintain Safety with Electricity 38
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
iii
Prevent ESD Damage 38
Site Environment 39
Power Supply Considerations 39
Rack Configuration Considerations 39
Mount and Connect 41
CHAPTER 3
Unpack and Inspect the Chassis 41
Rack-Mount the Chassis 42
Ground the Chassis 46
Install the FIPS Opacity Shield 48
Connect Cables, Turn on Power, and Verify Connectivity 53
Maintenance and Upgrade 55
CHAPTER 4
Remove and Replace the Network Module 55
Remove and Replace the Fan Module 58
Remove and Replace the SSD 59
Remove and Replace the Power Supply Module 61
Connect the DC Power Supply Module 64
Secure the Power Cord on the AC Power Supply Module 70
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
iv
Contents
CHAPTER 1
Overview
•Features, on page 1
•Deployment Options, on page 4
•Package Contents, on page 4
•Serial Number Location, on page 5
•Front Panel, on page 6
•Front Panel LEDs, on page 7
•Rear Panel, on page 8
•Network Modules, on page 10
•Hardware Bypass Network Modules, on page 12
•Power Supply Modules, on page 18
•Fan Modules, on page 20
•Supported SFP/SFP+ and QSFP Transceivers, on page 21
•Hardware Specifications, on page 23
•Product ID Numbers, on page 25
•Power Cord Specifications, on page 28
Features
The Cisco Firepower 4100 series security appliance is a standalone modular security services platform. It is
capable of running multiple security services simultaneously and so is targeted at the data center as a
multiservice platform. The series includes the Firepower 4110, 4120, 4140, and 4150. See Product ID Numbers,
on page 25 for a list of the product IDs (PIDs) associated with the 4100 series.
The Firepower 4100 supports the following software:
• Cisco Firepower Threat Defense
We recommend that you upgrade to the latest version (at least to Version 6.1.0)
to take advantage of software updates that enhance SSD management performance
and longevity.
Note
• Cisco Firepower eXtensible Operating System (FXOS)
• Cisco ASA
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
1
The Firepower 4100 is certified for Common Criteria (CC) and Federal Information Processing Standards
(FIPS). See "Security Certifications Compliance" in the Cisco FXOS CLI Configuration Guide for the procedure
for enabling these modes using the CLI. See "Security Certifications Compliance" in the Cisco FXOS Firepower
Chassis Manager Configuration Guide for information for enabling these modes using the Firepower Chassis
Manager.
Note
The following figure shows the Firepower 4100 series security appliance.
Figure 1: Firepower 4100 Series
See the Cisco Interactive Library for a video that displays the features and components of the Firepower 4100.
The following table lists the features for the Firepower 4100 series.
Table 1: Firepower 4100 Series Features
4150414041204110Feature
1 RU
Fits a standard 19-in. (48.3cm) square-hole rack
Form factor
Yes
Slide rails, mount ears, and screws included (4-post EIA-310-D rack)
Rack mount
Front to rear
Cold aisle to hot aisle
Airflow
Single 22-coreSingle 18-core
Single 12-coreProcessor
256-GB DDR4
DRAM
256-GB DDR4
DRAM
128-GB DDR4
DRAM
64-GB DDR4
DRAM
Memory
24
With two 8-port network modules installed
Maximum number
of interfaces
One Gigabit Ethernet
Supports 1-G fiber or copper SFPs
Management port
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
2
Overview
Features
4150414041204110Feature
One RJ-45 consoleSerial port
One USB 2.0 Type AUSB port
Eight fixed 1-G and 10-G SFP ports (named Ethernet 1/1 through 1/8)Network ports
Yes
Eight fixed 1-G and 10-G SFP ports
See Network Modules, on page 10 for the number of SFP/SFP+ ports for each network
module.
SFP ports
Yes
Displays the serial number; on the front panel
Pullout asset card
Yes
On rear panel
Grounding lug
Yes
On front panel
Locator beacon
Yes
On rear panel
Power switch
Yes
Two network module slots ( named network module 2 and network module 3)
Network modules
8-port 10-Gigabit Ethernet SFP+
4-port 40-Gigabit Ethernet QSFP+
8-port 1-Gigabit Ethernet SFP+ fail-to-wire
2-port 40-Gigabit Ethernet SFP+ fail-to-wire
6-port 1-Gigabit Ethernet SX fiber fail-to-wire
6-port 10-Gigabit Ethernet SR fiber fail-to-wire
6-port 10-Gigabit Ethernet LR fiber fail-to-wire
Supported network
modules
Two (1+1) power supply module slots
Ships with two 400-W AC power supply
modules
Hot-swappable
Two (1+1) power supply module slots
Ships with one 400-W AC power supply
modules
Hot-swappable
AC power supply
Yes (optional)NoDC power supply
Yes 1+1Redundant power
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
3
Overview
Features
4150414041204110Feature
Six fan module slots
3+1 redundancy
Hot-swappable
Fan
Two SSD slots (400 GB)
Ships with one SSD installed in slot 1.
RAID is not supported.
Note
Slot 2 is reserved for the MSP.
Two SSD slots (200 GB)
Ships with one SSD installed in slot 1.
RAID is not supported.
Note
Slot 2 is reserved for the Malware Storage
Pack (MSP).
Storage
Yes
Installed in the second SSD slot only
MSP
Deployment Options
Here are some examples of how you can deploy the Firepower 4100:
• In a data center using NGFW and ASA
• At the core/aggregation layer of a 3-tier data center in a high availability configuration
• As a dedicated multifunctional security service within converged infrastructure stacks, for example,
vBlock, FlexPod, and so forth, at the access layer
• As a high-performance data center security appliance between the WAN edge and the data center core
in a high availability configuration
• Inter-DC clustering deployments
• In newer spine/leaf data center designs, deployment as a leaf that exclusively offers security functions
Package Contents
The following figure shows the package contents for the Firepower 4100. Note that the contents are subject
to change and your exact contents might contain additional or fewer items.
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
4
Overview
Deployment Options
Figure 2: Firepower 4100 Package Contents
Blue console cable PC terminal adapter2Firepower 4100 chassis1
10/100/1000BASE-T SFP transceiver42 power cords (country-specific)3
Tie wrap clamp62 slide rails5
Flextronics tie wrap8Artesyn tie wrap7
Ten 8-32 x .375-in. countersink screws
used to secure the mounting bracket to
chassis (6 screws), and the cable
management brackets to the mounting
brackets (4 screws)
102 M3X6 mm screws used to secure the
inner slide rail to the chassis
9
Two 10-32 x .375-in. screws used to secure
the ground lug
122 slide rail locking brackets11
2 cable management brackets141 ground lug #6 AWG, 90 degree, #10 post13
Welcome to the Cisco Firepower 410015
Serial Number Location
The serial number for the Firepower 4100 series chassis is located on the pullout asset card on the front panel.
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
5
Overview
Serial Number Location
Figure 3: Serial Number on the 4100 Chassis
You can also view additional model information on the compliance label located on the bottom of the chassis.
Figure 4: Compliance Label on the 4100 Chassis
Front Panel
The following figure shows the front panel of the Firepower 4100.
Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide
6
Overview
Front Panel
Otros manuales para Firepower 4100 Series
9
Este manual sirve para los siguientes modelos
4
Tabla de contenidos
Otros manuales de Cortafuegos de Cisco
Cisco
Cisco LightStream 1010 Manual de usuario
Cisco
Cisco Small Business RV215W Manual de usuario
Cisco
Cisco PIX 506E - Security Appliance Manual de usuario
Cisco
Cisco 3110 Manual
Cisco
Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario
Cisco
Cisco Small Business RV215W Manual de instrucciones
Cisco
Cisco RV110W Manual de usuario
Cisco
Cisco 881W - Integrated Services Router Wireless Manual de instrucciones
Cisco
Cisco Meraki MX64 Manual de usuario
Cisco
Cisco ASA 5506-X Manual de usuario
Cisco
Cisco RV110W Manual de usuario
Cisco
Cisco ASA 5506-X Manual de usuario
Cisco
Cisco Spam Manual de usuario
Cisco
Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario
Cisco
Cisco Firepower 4100 Series Manual de instalación
Cisco
Cisco TelePresence Server 7010 Manual de usuario
Cisco
Cisco ASA 5585-X Manual de usuario
Cisco
Cisco 5580-40 - ASA Firewall Edition Manual
Cisco
Cisco PIX 506E - Security Appliance Manual de usuario
Cisco
Cisco Small Business RV215W Manual de usuario
Manuales populares de Cortafuegos de otras marcas
H3C
H3C SecPath F5000-AI-15 Manual de usuario
Nexcom
Nexcom DNA 1150 Manual de usuario
Fortinet
Fortinet FortiGate-60 series Manual de usuario
Draytek
Draytek Vigor2860 Series Manual de usuario
Lanner electronics
Lanner electronics FW-7650 Series Manual de usuario
Swisscom
Swisscom Internet Backup Manual de usuario
