Cisco Firepower 4100 Series Manual de usuario

Overview

•Features, on page 1

•Deployment Options, on page 4

•Package Contents, on page 4

•Serial Number Location, on page 5

•Front Panel, on page 6

•Front Panel LEDs, on page 7

•Rear Panel, on page 8

•Network Modules, on page 9

•Hardware Bypass Network Modules, on page 11

•Power Supply Modules, on page 18

•Fan Modules, on page 20

•Supported SFP/SFP+ and QSFP Transceivers, on page 21

•Hardware Specifications, on page 24

•Product ID Numbers, on page 26

•Power Cord Specifications, on page 29

Features

The Cisco Firepower 4100 series security appliance is a standalone modular security services platform. It is

capable of running multiple security services simultaneously and so is targeted at the data center as a

multiservice platform. The series includes the Firepower 4110, 4120, 4140, and 4150. See Product ID Numbers,

on page 26 for a list of the product IDs (PIDs) associated with the 4100 series.

The Firepower 4100 series supports Cisco Firepower Threat Defense, Cisco Firepower eXtensible Operating

System (FXOS), and Cisco ASA software. See Cisco Firepower 4100/9300 FXOS Compatibility, which lists

software and hardware compatibility information for the Firepower 4100 series.

The Firepower 4100 is certified for the following security standards on ASA 9.8.xand FTD 6.2.x:

• Common Criteria (CC) and Commercial Solutions for Classified (CSFC)

• Federal Information Processing Standards (FIPS)

• Department of Defense Information Network Approved Product List (DoDIN APL)

• US Government Compliance for IPv6 (USGv6)

Overview

The Firepower 4100 series is certified for the following security standards on ASA 9.12.xand FTD 6.4.x:

• DoDIN APL

See the "Security Certifications Compliance" chapter in the Cisco FXOS CLI Configuration Guide or Cisco

FXOS Firepower Chassis Manager Configuration Guide for the procedure to enable security modes.

The following figure shows the Firepower 4100 series security appliance.

Figure 1: Firepower 4100 Series

See the Cisco Interactive Library for a video that displays the features and components of the Firepower 4100.

The following table lists the features for the Firepower 4100 series.

Table 1: Firepower 4100 Series Features

4150414041204110Feature

1 RU

Fits a standard 19-in. (48.3cm) square-hole rack

Form factor

Yes

Slide rails, mount ears, and screws included (4-post EIA-310-D rack)

Rack mount

Front to rear

Cold aisle to hot aisle

Airflow

Single 22-coreSingle 18-core

Single 12-coreProcessor

256-GB DDR4

DRAM

256-GB DDR4

DRAM

128-GB DDR4

DRAM

64-GB DDR4

DRAM

Memory

With two 8-port network modules installed

Maximum number

of interfaces

One Gigabit Ethernet

Supports 1-Gb fiber or copper SFPs

Management port

One RJ-45 consoleSerial port

One USB 2.0 Type AUSB port

Overview

Features

4150414041204110Feature

Eight fixed 1-Gb and 10-Gb SFP ports (named Ethernet 1/1 through 1/8)Network ports

Eight fixed 1-Gb and 10-Gb SFP portsSFP ports

Displays the serial number; on the front panelPullout asset card

On rear panelGrounding lug

On front panelLocator beacon

On rear panelPower switch

Two network module slots (named network module 2 and network module 3)Network modules

• 8-port 10-Gigabit Ethernet SFP+

• 4-port 40-Gigabit Ethernet QSFP+

• 8-port 1-Gigabit Ethernet copper with hardware bypass

• 2-port 40-Gigabit Ethernet QSFP+ (built-in) with hardware bypass

• 6-port 1-Gigabit Ethernet SX fiber SFP+ (built-in) with hardware bypass

• 6-port 10-Gigabit Ethernet SR fiber SFP+ (built-in) with hardware bypass

• 6-port 10-Gigabit Ethernet LR fiber SFP+ (built-in) with hardware bypass

Supported network

modules

Two (1+1) power supply module slots

Ships with two 400-W AC power supply

modules

Hot-swappable

Two (1+1) power supply module slots

Ships with one 400-W AC power supply

modules

Hot-swappable

AC power supply

Yes (optional)NoDC power supply

Yes 1+1Redundant power

Six fan module slots

3+1 redundancy

Hot-swappable

Fan

Two SSD slots (400 GB)

Ships with one SSD installed in slot 1.

RAID is not supported.

Note

Slot 2 is reserved for the MSP.

Two SSD slots (200 GB)

Ships with one SSD installed in slot 1.

RAID is not supported.

Note

Slot 2 is reserved for the Malware Storage

Pack (MSP).

Storage

Installed in the second SSD slot onlyMSP

Overview

Features

Deployment Options

Here are some examples of how you can deploy the Firepower 4100:

• In a data center using NGFW and ASA

• At the core/aggregation layer of a 3-tier data center in a high availability configuration

• As a dedicated multifunctional security service within converged infrastructure stacks, for example,

vBlock, FlexPod, and so forth, at the access layer

• As a high-performance data center security appliance between the WAN edge and the data center core

in a high availability configuration

• Inter-DC clustering deployments

• In newer spine/leaf data center designs, deployment as a leaf that exclusively offers security functions

Package Contents

The following figure shows the package contents for the Firepower 4100. Note that the contents are subject

to change and your exact contents might contain additional or fewer items.

Figure 2: Firepower 4100 Package Contents

Blue console cable PC terminal adapter2Firepower 4100 chassis1

10/100/1000BASE-T SFP transceiver4Two power cords (country-specific)3

Tie wrap clamp6Two slide rails5

Overview

Deployment Options

Flextronics tie wrap8Artesyn tie wrap7

Ten 8-32 x .375-in. countersink screws used to

secure the mounting bracket to chassis (6 screws),

and the cable management brackets to the

mounting brackets (4 screws)

10Two M3X6 mm screws used to secure the inner

slide rail to the chassis

Two 10-32 x .375-in. screws used to secure the

ground lug

12Two slide rail locking brackets11

Two cable management brackets14One ground lug #6 AWG, 90 degree, #10 post13

Welcome to the Cisco Firepower 410015

Serial Number Location

The serial number for the Firepower 4100 series chassis is located on the pullout asset card on the front panel.

Figure 3: Serial Number on the 4100 Chassis

You can also view additional model information on the compliance label located on the bottom of the chassis.

Overview

Serial Number Location

Figure 4: Compliance Label on the 4100 Chassis

Front Panel

The following figure shows the front panel of the Firepower 4100.

Figure 5: Firepower 4100 Front Panel

Gigabit Ethernet management port2RJ-45 console port1

Eight fixed SFP+ (1-Gb/10-Gb) ports (in network

module slot 1)

Gigabit Ethernet 1/1 through 1/8 labeled top to

bottom, left to right

4USB 2.0 Type A port3

SSD 26SSD 15

Locator LED8Power LED7

Network module 2

The 10-Gb network module is shown.

Note

10Pullout asset card9

Overview

Front Panel

Network module 3

The 10-Gb network module is shown.

Note

Front Panel LEDs

The following figure and table describe the Firepower 4100 front panel LEDs.

Figure 6: Front Panel LEDs

Health (SYS)

• Off—System is not booting yet.

• Green, flashing—Power-up diagnostics are

complete and system is booting up.

• Green—The system has passed power-up

diagnostics.

• Amber—Power-up diagnostics has failed.

• Amber, flashing—Alarm; power-up

diagnostics are running.

2Management

• Off—No connection or port is not in use.

• Amber—No link or network failure.

• Green—Link up.

• Green, flashing—Network activity.

Power

• Off—Input power not detected.

• Green, flashing—Appears only when you

move the power switch from ON to OFF.

System is shutting down and powers off once

shutdown is completed.

• Amber—System is powering up.

• Green—System fully powered up.

• Amber, flashing—Reserved.

4SSD

• Off— SSD not present.

• Green—SSD is present; no activity.

• Green, flashing—SSD is active.

• Amber—SSD failure.

• Amber, flashing—Rebuilding, flashes at 1

Hz.

•Amber, flashing—Predictive failure analysis

(PFA) and hot spare; two fast flashes at 4

Hz, pause for 0.5 seconds.

Overview

Front Panel LEDs

Locator LED

• Off—Locate is off.

• Blue—Locate is on.

6Active (ACT)

This LED is not supported; reserved for future

use.

Network activity

• Off—No connection or port is not in use.

• Amber—No link or network failure.

• Green—Link up.

• Green, flashing—Network activity.

Rear Panel

The following figure shows the rear panel of the Firepower 4100.

Figure 7: Firepower 4100 Rear Panel

Power supply module 12Power on/off switch1

Fan module 14Power supply module 23

Fan module 36Fan module 25

Fan module 58Fan module 47

Location for the two-post grounding lug

The two-post grounding lug is

included in the accessory kit.

Note

10Fan module 69

The power switch is located to the left of power supply module 1 on the rear of the chassis. It is a toggle

switch that controls power to the system. If the power switch is in standby position, only the 3.3-V standby

power is enabled from the power supply module and the 12-V main power is OFF. When the switch is in the

ON position, the 12-V main power is turned on and the system boots.

You can shut down the chassis in one of two ways:

• Perform a graceful shutdown using the shutdown commands (see the FXOS CLI Configuration Guide

for the procedure). This may take several minutes to complete. Then toggle the power switch to the OFF

position. The power LED changes from solid green to off immediately.

Overview

Rear Panel

If you move the power switch to the OFF position before the shutdown command

sequence is complete or if you remove the system power cords before the graceful

shutdown is complete, disk corruption can occur.

Caution

• Toggle the power switch to the OFF position. The power LED changes from solid green to off.

After removing power from the chassis either by moving the power switch to OFF or unplugging the power

cord, wait at least 10 seconds before turning power back ON.

Note

Network Modules

The Firepower 4100 contains two network module slots that provide optical or electrical network interfaces.

Network modules are optional, removable I/O modules that provide either additional ports or different interface

types (1/10/40 Gb). The Firepower network modules plug into the chassis on the front panel.

For More Information

• See 10-Gb Network Module, on page 9 for a description of the 10-GB network module.

• See 40-Gb Network Module, on page 10 for a description of the 40-GB network module.

• See Hardware Bypass Network Modules, on page 11 for the location and description of the LEDs,

and the port configurations for the hardware bypass network modules.

• See Install the Network Module for the procedure for removing and replacing network modules.

10-Gb Network Module

The following figure shows the front panel of the 10-Gb network module (FPR4K-NM-8X10G). The

FPR4K-NM-8X10G is a single-wide module that supports hot swapping. The eight ports are numbered from

top to bottom, left to right.

Make sure you have the correct firmware package and software version installed to support this network

module. For instructions on how to verify your firmware package version and to upgrade the firmware if

necessary, see the Cisco Firepower 4100/9300 FXOS Firmware Upgrade Guide. See Cisco Firepower 4100/9300

FXOS Compatibility for the software compatibility matrix.

Note

The FPR4K-NM-8X10G is NEBS-compliant.

Note

Overview

Network Modules

You can fit four copper SFPs in either the top row of ports or the bottom row of ports. Both rows cannot be

populated at the same time, because of the port row spacing.

Note

Figure 8: FPR4K-NM-8X10G

Ethernet X/12Captive screw/handle1

Ethernet X/54Ethernet X/33

Ethernet X/26Ethernet X/75

Ethernet X/68Ethernet X/47

Network activity LEDs

• Off—No connection or port is not in use.

• Amber—No link or network failure.

• Green—Link up.

• Green, flashing—Network activity.

10Ethernet X/89

For More Information

• For a list of copper SFPs, see Supported SFP/SFP+ and QSFP Transceivers, on page 21.

40-Gb Network Module

The following figure shows the front panel of the 40-Gb network module (FPR4K-NM-4X40G.) The

FPR4K-NM-4X40G is a single-wide module that supports hot swapping. The four ports are numbered left to

right.

Overview

40-Gb Network Module

Otros manuales para Firepower 4100 Series

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Cortafuegos de Cisco

Cisco

Cisco Firepower 4100 Series Manual de instalación

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manual de usuario

Cisco

Cisco MEREAKI MX65W Manual de usuario

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario

Cisco

Cisco S195 Manual

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario

Cisco

Cisco PIX 520 - PIX Firewall 520 Manual de usuario

Cisco

Cisco PIX 506 - Firewall Manual de usuario

Cisco

Cisco Firepower 1010 Manual de usuario

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manual de usuario

Cisco

Cisco ASA 5506-X Manual de usuario

Cisco

Cisco Small Business Pro SA 520W Manual de instrucciones

Cisco

Cisco Firepower 7010, Firepower 7020, Firepower 7030, Firepower 7050, Firepower 7110, Firepower 7120, Firepower 7115, Firepower... Manual de usuario

Cisco

Cisco RV110W Manual de usuario

Cisco

Cisco Firepower 2100 Manual de usuario

Cisco

Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Manual de usuario

Cisco

Cisco Cisco ASA 5500 Series Manual de usuario

Cisco

Cisco LightStream 1010 Instrucciones de instalación

Cisco

Cisco PIX-525-UR-BUN - PIX 525 Unrestricted Bundle Manual de usuario

Cisco

Cisco Firepower 4100 Series Manual

Cisco

Cisco Cisco ASA Series Manual de usuario

Cisco

Cisco ASA 5506-X Manual de usuario

Cisco

Cisco ASA 5550 Series Manual de usuario

Cisco

Cisco M690 Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario