FPR3105-ASA-K9

Throughput: FW + AVC (1024B)

10 Gbps

Throughput: FW + AVC + IPS (1024B)

10 Gbps

Maximum concurrent sessions, with AVC

1.5 million

Maximum new connections per second, with AVC

90,000

TLS1

3.2 Gbps

Throughput: NGIPS (1024B)

10.0 Gbps

IPSec VPN Throughput
(1024B TCP w/Fastpath)

5.5 Gbps

Projected IPSec VPN Throughput
(1024B TCP w/Fastpath) with VPN Offload (FTD 7.2)

NA

Maximum VPN Peers

2,000

Local On-device Management

Yes

Centralized management

Centralized configuration, logging, monitoring, and reporting are performed by the Firewall Management Center or alternatively in the cloud with Cisco Defense Orchestrator

Application Visibility and Control (AVC)

Standard, supporting more than 4000 applications, as well as geolocations, users, and websites

AVC: OpenAppID support for custom, open source, application detectors

Standard

Cisco Security Intelligence

Standard, with IP, URL, and DNS threat intelligence

Cisco Secure IPS

Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence

Cisco Malware Defense

Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available

Cisco Secure Malware Analytics

Available

URL Filtering: number of categories

More than 80

URL Filtering: number of URLs categorized

More than 280 million

Automated threat feed and IPS signature updates

Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos Group

Third-party and open-source ecosystem

Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats

High availability and clustering

Active/active, Active/standby. Cisco Secure Firewall 3100 Series allows clustering of up to 8 chassis (no clustering on 3105)

Cisco Trust Anchor Technologies

Secure Firewall 3100 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details