Cisco Firepower 4100 Series Manual

Cisco Firepower 4100 Series Hardware Installation Guide

First Published: 2016-03-31

Last Modified: 2017-04-27

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

CHAPTER 1

Overview 1

About the Cisco Firepower 4100 Security Appliance 1

Deployment Options 4

Package Contents 4

Serial Number Location 5

Front Panel 6

Front Panel LEDs 7

Rear Panel 8

Network Modules 9

Nonhardware (FTW) Bypass Network Modules 10

Hardware Bypass (FTW) Network Modules 12

Power Supply Modules 18

Fan Modules 20

Supported SFP/SFP+ Transceivers 21

Power Cord Specifications 24

Hardware Specifications 34

CHAPTER 2

Prepare for Installation 37

Installation Notes and Warnings 37

Safety Recommendations 39

Maintain Safety with Electricity 40

Prevent Electrostatic Discharge Damage 40

Site Environment 41

Power Supply Considerations 41

Equipment Rack Configuration Considerations 41

CHAPTER 3

Mount and Connect 43

Rack-Mount the Chassis 43

Cisco Firepower 4100 Series Hardware Installation Guide

iii

Ground the Chassis 49

Install the FIPS Opacity Shield 50

Connect Cables, Turn on Power, and Verify Connectivity 55

CHAPTER 4

Maintenance and Upgrades 59

Remove and Replace the Network Module 59

Remove and Replace the Fan Module 62

Remove and Replace the SSD 64

Remove and Replace the Power Supply Module 65

Connect the DC Power Supply Module 69

Secure the Power Cord on the AC Power Supply Module 75

Cisco Firepower 4100 Series Hardware Installation Guide

Contents

CHAPTER 1

Overview

This chapter describes the hardware features of the Cisco Firepower 4100 security appliance, and contains

the following sections:

•About the Cisco Firepower 4100 Security Appliance, page 1

•Deployment Options, page 4

•Package Contents, page 4

•Serial Number Location, page 5

•Front Panel, page 6

•Front Panel LEDs, page 7

•Rear Panel, page 8

•Network Modules, page 9

•Power Supply Modules, page 18

•Fan Modules, page 20

•Supported SFP/SFP+ Transceivers, page 21

•Power Cord Specifications, page 24

•Hardware Specifications, page 34

About the Cisco Firepower 4100 Security Appliance

The Cisco Firepower 4100 security appliance is a standalone modular security services platform with a one

RU form factor. It is capable of running multiple security services simultaneously and so is targeted at the

data center as a multi-service platform. The Firepower 4100 chassis contains the following components:

•Network module 1 with eight fixed SFP+ ports (1G and 10G connectivity), the management port, RJ-45

console port, Type A USB port, PID and S/N card, locator indicator, and power switch

•Two network modules slots (network module 2 and network module 3)

•Two (1+1) redundant power supply module slots

Cisco Firepower 4100 Series Hardware Installation Guide

•Six fan module slots

•Two SSD bays

RAID is not supported.Note

The network modules, power supply modules, fan modules and SSDs are FRUs (field replaceable units). The

power supply modules and the fan modules are hot-swappable. Although the hardware supports hot swapping

for the SSDs and network modules, the software does not, so you must power down the chassis before removing

and replacing them.

You can install an MSP (Malware Storage Pack) in the second SSD slot (SSD slot 2). The MSP stores threat

detection results for use in future analysis. It supports the Advanced Malware Protection software feature. It

is used as both storage and as the Malware application repository.

Do not switch the two SSDs. The MSP MUST be installed in slot 2. If you remove it and install it in slot

1, all stored file capture data are lost.

Caution

The Firepower 4100 is a one RU chassis designed to fit in a 19-inch rack using rack mount slides. The ports

are located on the front (cold aisle) and the power supplies, power entry, and fans are in the rear. Air flow is

from front to rear (cold aisle to hot aisle).

The following figure shows the Firepower 4100 series security appliance.

Figure 1: Firepower 4100 Series Security Appliance

Cisco Firepower 4100 Series Hardware Installation Guide

Overview

About the Cisco Firepower 4100 Security Appliance

Power Switch

The power switch is located to the left of power supply module 1 on the rear of the chassis. It is a toggle

switch that controls power to the system. If the power switch is in standby position, only the 3.3V

standby power is enabled from the power supply module and the 12V main power is OFF. When the

switch is in the ON position, the 12V main power is turned on and the system boots.

Before you move the power switch to the OFF position, use the shutdown commands so that the system

can perform a graceful shutdown. This may take several minutes to complete. After the graceful shutdown

is completed, the front panel power LED is unlit and the console displays Power Down.

The shutdown commands are first available in Firepower eXtensible Operating

System (FXOS) version 2.0.1. See the FXOS Configuration Guide for more

information on using these commands.

Note

If you move the power switch to the OFF position before the shutdown

command sequence has completed or if you remove the system power cords

before the graceful shutdown is complete, disk corruption can occur.

Caution

The Firepower 4100 has the following hardware configurations.

Firepower 4110

The Firepower 4110 has a single 12-core processor, one AC power supply module, one 200-GB SSD,

and 64-GB of DDR4 RAM. You can add another power supply module for redundant power.

The second SSD bay is reserved for the MSP SSD.

Firepower 4120

The Firepower 4120 has dual 12-core processors, one AC power supply module, one 200-GB SSD,

and 128-GB of DDR4 RAM. You can add another power supply module for redundant power.

The second SSD bay is reserved for the MSP SSD.

The Firepower 4120 is NEBS-certified.Note

Firepower 4140

The Firepower 4140 has dual 18-core processors, dual AC power supply modules, one 400-GB SSD,

and 256-GB of DDR4 RAM.

The second SSD bay is reserved for the MSP SSD.

Firepower 4150

The Firepower 4150 has a dual 22-core processor, dual redundant AC power supply modules, one

400-GB SSD in slot 1, and 256-GB of DDR4 RAM. The second SSD bay is reserved for the MSP SSD.

Cisco Firepower 4100 Series Hardware Installation Guide

Overview

About the Cisco Firepower 4100 Security Appliance

Deployment Options

You can deploy the Firepower 4100 in the following ways:

•In a data center using NGFW and ASA

•At the core/aggregation layer of a three-tier data center in an HA configuration

•As a dedicated multi-functional security service within converged infrastructure stacks, for example,

vBlock, FlexPod, and so forth, at the access layer

•As a high-performance data center security appliance between the WAN edge and the data center core

in an HA configuration

•Inter-DC clustering deployments

•In newer spine/leaf data center designs, deployment as a leaf that exclusively offers security functions

Package Contents

The following figure shows the package contents for the Firepower 4100 series security appliance. Note that

the contents are subject to change and your exact contents might contain additional or fewer items.

Figure 2: Firepower 4100 Package Contents

Blue console cable PC terminal

adapter

2Firepower 4100 chassis1

10/100/1000BASE-T SFP

transceiver

4Two power cords

(country-specific)

Cisco Firepower 4100 Series Hardware Installation Guide

Overview

Deployment Options

Tie wrap clamp6Two slide rails5

Flextronics tie wrap8Artesyn tie wrap7

Ten 8-32 x .375" countersink

screws used to secure the mounting

bracket to chassis (6 screws), and

the cable management brackets to

the mounting brackets (4 screws)

10Two M3X6mm screws used to

secure the inner slide rail to the

chassis

Two 10-32 x .375" screws used to

secure the ground lug

12Two slide rail locking brackets11

Two cable management brackets14One ground lug #6 AWG, 90

degree, #10 post

Welcome to the Cisco Firepower

4100

115

Serial Number Location

The serial number for the Firepower 4100 series chassis is located on the pull-out label card on the front panel.

Figure 3: Serial Number on 4100 Chassis

Cisco Firepower 4100 Series Hardware Installation Guide

Overview

Serial Number Location

Front Panel

The following figure shows the front panel of the Firepower 4100 series security appliance.

Figure 4: Firepower 4100 Series Front Panel

Gigabit Ethernet management port2RJ-45 console port1

Eight fixed SFP+ (1G/10G) ports are

provided (network module slot 1)

Gigabit Ethernet 1/1 through 1/8

labeled top to bottom, left to right

4Type A USB port3

SSD 26SSD 15

Locator LED8Power LED7

Network Module (network module slot

The 10G network module is

shown.

Note

10Pull-out label card9

Network Module (network module slot

The 10G network module is

shown.

Note

Cisco Firepower 4100 Series Hardware Installation Guide

Overview

Front Panel

Otros manuales para Firepower 4100 Series

Tabla de contenidos

Otros manuales de Cortafuegos de Cisco

Cisco

Cisco MEREAKI MX65W Manual de usuario

Cisco

Cisco S195 Manual

Cisco

Cisco Small Business RV220W Manual de usuario

Cisco

Cisco Firepower 1100 Manual de usuario

Cisco

Cisco ASA 5550 Series Manual de usuario

Cisco

Cisco Firepower 4110 Manual de usuario

Cisco

Cisco Cisco ASA 5510 Manual de usuario

Cisco

Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Manual de usuario

Cisco

Cisco LightStream 1010 Instrucciones de instalación

Cisco

Cisco PIX 501 Manual

Cisco

Cisco RV110W Manual de usuario

Cisco

Cisco 380 Series Manual

Cisco

Cisco IronPort M1070 Manual de usuario

Cisco

Cisco LightStream 1010 Manual de usuario

Cisco

Cisco LightStream 1010 Manual de instrucciones

Cisco

Cisco Firepower 4100 Series Manual de usuario

Cisco

Cisco ASA 5580 Manual de usuario

Cisco

Cisco Small Business RV215W Manual de usuario

Cisco

Cisco Small Business RV215W Manual de usuario

Cisco

Cisco Firepower 4100 Series Manual de instalación

Cisco

Cisco ASA 5506-X Instrucciones de instalación

Cisco

Cisco Cisco ASA Series Instrucciones de instalación

Cisco

Cisco 515E - PIX Restricted Bundle Manual de usuario

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario