ASA 5506-X Firepower to Cisco Firepower 1010 NGFW
ASA 5506-X Firepower to Cisco Firepower 1010 NGFW
Cisco has announced the End of Sale and End of Life of the ASA 5506-X FirePower equipment.
What equipment is listed as a replacement for the ASA 5506-X FirePower?
The new equipment that CISCO has brought to the market as a replacement for the ASA5506 is the Cisco Firepower 1010 NGFW.
Cisco recommends the Firepower 1010 appliance as a replacement for ASA5506 running Firepower Threat Defense or Firepower Services. Firepower 1010 will be available in early June 2019.
Firepower 1010 runs on Cisco Firepower Threat Defense software 6.4 and higher and provides higher performance than the ASA5506.
Cisco Firepower 1010 NGFW: Low cost, highperformance 650Mbps NGFW, L2 switching.
The Cisco Firepower® 1000 Series is a family of three platforms(FPR 1010, FPR 1120, FPR 1140) of threat-focused next-generation firewall (NGFW) security that delivers enterprise resiliency through superior threat defense. It delivers exceptional sustained performance when advanced threat features are enabled. The 1000 Series performance range addresses use cases from small offices, home offices, remote branch offices to the Internet edge. The 1000 Series platforms run Cisco Firepower Threat Defense (FTD). Support for Cisco® Adaptive Security Appliance (ASA) Firewall will be added in a later release.
In this article we will focus on Cisco FirePower 1010 NGFW – Cisco FirePower 1010 NGFW – Cisco FirePower 1010 NGFW – Cisco FirePower 1010 NGFW FPR 1010
| Description | FPR-1010 |
| 1G/100M/10M Management Ethernet | 1 |
| 1G/100M/10M RJ45 Ethernet Traffic Port | 8 |
| Console Port (RJ45) | 1 |
| Default SSD | 200GB |
| Intel SoC Built-in Crypto Capability | 2.5 Gbps |
| Intel x86 Atom Cores/Freq | 4C @ 1.5G |
| PoE+ Ports (FTD 6.5 or higher) | 2 |
| USB 3.0 Powered ports | 1 |
| x86 DRAM | 8G |
| L2 switch (FTD 6.5 or higher) | Yes |
| USB console | Yes |
Cisco FirePower 1010 NGFW features and benefits:
1. Protects against advanced threats
Application visibility and control, next-generation intrusion prevention system, advanced malware protection and URL filtering work together to provide enterprise-level protection.
Performance and reliability
Up to three times higher performance than the previous generation.
3. Better encrypted traffic inspection.
70% of today’s Internet traffic is encrypted.
4. The power of the portfolio
It works with security tools such as Cisco Threat Response to detect and stop threats in your environment.
Detailed performance specifications and highlights Cisco FirePower 1010 NGFW:
| Features | 1010 |
| Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B) | 650 Mbps |
| Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B) | 650 Mbps |
| Throughput: FW + AVC (450B) | 225 Mbps |
| Throughput: FW + AVC + IPS (450B) | 225 Mbps |
| Maximum concurrent sessions, with AVC | 100K |
| Maximum new connections per second, with AVC | 6K |
| Transport Layer Security (TLS) | 150 Mbps |
| Throughput: NGIPS (1024B) | 650 Mbps |
| Throughput: NGIPS (450B) | 225 Mbps |
| IPSec VPN throughput (1024B TCP w/Fastpath) | 300 Mbps |
| Cisco Firepower Device Manager (local management) | Yes |
| Centralized management | Centralized configuration, logging, monitoring, and reporting are performed in the Management Center or alternatively in the cloud with Cisco Defense Orchestrator. |
| AVC | Standard, supporting more than 4000 applications, as well as geolocations, users and websites |
| AVC: OpenAppID support for custom, open-source application detectors | Standard |
| Cisco Security Intelligence | Standard, with IP, URL, and DNS threat intelligence |
| Cisco Firepower NGIPS | Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence. |
| Cisco Advanced Malware Protection (AMP) for Networks | Available; enables detection, blocking, tracking, analysis and containment of targeted and persistent malware, addressing the continuum of attacks during and after attacks. Integrated threat correlation with Cisco AMP for endpoints is also optionally available. |
| Cisco AMP Threat Grid sandboxing | Available |
| URL filtering: number of categories | More than 80 |
| URL filtering: number of categorized URLs | More than 280 million |
| Automated threat updates and IPS signatures | Yes: class-leading Collective Security Intelligence (CSI) from Cisco Talos® Group (https://www.cisco.com/c/en/us/products/security/talos.html) |
| Automated threat and IPS signature updates | Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats |
| High availability and clustering. | Active / standby |
| Cisco Trust Anchor Technologies | Cisco Firepower 1000 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. |
Additional information End of Life ASA 5506-X:
Cisco has announced the End of Sale and End of Life of the ASA 5506-X FirePower devices, Cisco recommends the Firepower 1010 device as a replacement for ASA5506:
|
Milestone |
Definition |
Date |
|
End-of-Life Announcement Date |
The date the document that announces the end-of-sale and end-of-life of a product is distributed to the general public. |
April 30, 2019 |
|
End-of-Sale Date: |
The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date. |
July 30, 2019 |
|
Last Ship Date: |
The last-possible ship date that can be requested from Cisco and/or its contract manufacturers. Actual ship date is dependent on lead time. |
October 30, 2019 |
|
End of SW Maintenance Releases Date: |
The last date that Cisco Engineering may release any final software maintenance releases or bug fixes. After this date, Cisco Engineering will no longer develop, repair, maintain, or test the product software. |
July 30, 2020 |
|
End of Vulnerability/Security Support: |
The last date that Cisco Engineering may release a planned maintenance release or scheduled software remediation for a security vulnerability issue. |
July 30, 2022 |
|
End of Routine Failure Analysis Date: |
The last-possible date a routine failure analysis may be performed to determine the cause of hardware product failure or defect. |
July 30, 2020 |
|
End of New Service Attachment Date: |
For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract. |
July 30, 2020 |
|
End of Service Contract Renewal Date: |
The last date to extend or renew a service contract for the product. |
October 28, 2023 |
|
Last Date of Support: |
The last date to receive applicable service and support for the product as entitled by active service contracts or by warranty terms and conditions. After this date, all support services for the product are unavailable, and the product becomes obsolete. |
July 31, 2024 |
What is Cisco Firepower® NGFW Cisco Firepower® NGFW?
Cisco Firepower® NGFW (next-generation firewall) is the first fully integrated, threat-focused next-generation firewall with unified management. Uniquely provides advanced threat protection before, during and after attacks.
|
Stop further threats |
Contains known and unknown malware with Cisco® Advanced Malware Protection (AMP) and sandboxing. |
|
|
Gain superior visibility into your environment with Cisco Firepower Next-Generation IPS. |
||
|
Detect earlier, act faster. |
The Cisco Annual Security Report identifies an average time from infection to detection of 100 days across all enterprises. |
Get unified management and automated threat correlation through tightly integrated security features, including application firewall, NGIPS and AMP. |
|
Get more from your network |
Cisco Firepower Next-Generation Firewall (NGFW) Data Sheet Other related news:https://www.solutel.com/solutel-la-seguridad-tecnologica/ |
