Call a Specialist Today! (02) 9388 1741
Free Delivery! Free Delivery!

Cisco Firepower 9300 NGFW Appliance
Industry's First Fully Integrated, Threat-Focused Next-Generation Firewall

Cisco Firepower 9300 NGFW Appliance

Cisco Products
Cisco Firepower 9300 NGFW Appliance
Cisco Firepower 9300 AC Chassis
Includes 2 power supply units + 4 fans + rack-mount kit (3RU; accommodates up to three security modules)
Our Price: Request a Quote

Click here for more options and pricing!

Please Note: All Prices are Inclusive of GST


Most next-generation firewalls (NGFWs) focus heavily on enabling application control, but little on their threat defense capabilities. To compensate, some NGFW’s will try to supplement their first-generation intrusion prevention with a series of non-integrated add-on products. However, this approach does little to protect your business against the risks posed by sophisticated attackers and advanced malware. Further, once you do get infected, they offer no assistance in scoping the infection, containing it, and remediating quickly.

What you need is an integrated, threat-centric next-generation firewall. One that not only delivers granular application control, but also provides effective security against the threats posed by sophisticated and evasive malware attacks.

The Cisco Firepower Next-Generation Firewall (NGFW) is the industry’s first fully integrated, threat-focused NGFW. It delivers comprehensive, unified policy management of firewall functions, application control, threat prevention, and advanced malware protection from the network to the endpoint.

It can be deployed on Cisco Firepower 2100 Series, 4100 Series, and 9300 appliances to provide a performance and density optimized NGFW security platform for Internet edge and other high-performance environments.

Protect Your Organization Before, During, and After an Attack

The Cisco Firepower NGFW includes the industry’s most widely deployed stateful firewall and provides granular control over more than 4,000 commercial applications. Its single management interface delivers unified visibility from the network to the endpoint. Firepower NGFW enables comprehensive policy management that controls access, stops attacks, defends against malware and provides integrated tools to track, contain and recover from attacks that do get through.

The Cisco Firepower NGFW is unique in the industry because it is the only next-generation firewall that:

  • Provides a next-generation intrusion prevention system (NGIPS) to deliver industry-leading threat protection
  • Includes a fully integrated advanced malware protection (AMP) solution that addresses both known and unknown threats, along with an integrated sandbox
  • Gives you the ability to track and contain malware infections
  • Automatically correlates threat events with your network’s vulnerabilities so you can focus your resources on the threats that matter most
  • Analyzes your network’s weaknesses and recommends the best security policies to put in place
  • Integrates with a number of Cisco network security products to take advantage of your previous investments and provide stronger security


  • Stop more threats - both known and unknown - with the industry’s most effective threat protection
  • Gain more insight into and control over the users, applications, devices, threats, and vulnerabilities in your network
  • Detect earlier and act faster by shrinking malware time to detection from months down to hours and enable quicker remediation
  • Reduce Complexity and simplify your operations by consolidating all security functions into a single management interface
  • Get more from your network by integrating with other Cisco security and network solutions


  • Stop more threats
    Contain known and unknown malware with leading Cisco Advanced Malware Protection (AMP) and sandboxing.
  • Gain more insight
    Gain superior visibility into your environment with Cisco Firepower next-gen IPS. Automated risk rankings and impact flags identify priorities for your team.
  • Detect earlier, act faster
    The Cisco Annual Security Report identifies a 100-day median time from infection to detection, across enterprises. Reduce this time to less than a day.
  • Reduce complexity
    Get unified management and automated threat correlation across tightly integrated security functions, including application firewalling, NGIPS, and AMP.
  • Get more from your network
    Enhance security, and take advantage of your existing investments, with optional integration of other Cisco and third-party networking and security solutions.

Scalable multiservice security

Eliminate security gaps. Integrate and provision multiple Cisco and Cisco partner security services dynamically across the network fabric. See and correlate policy, traffic, and events across multiple services.

Expandable security modules

Flexibly scale your security performance. Meet business agility needs and enable rapid provisioning.

Carrier-grade performance

NEBS-compliant configurations available. Elevate threat defense and network performance with low-latency, large flow handling, and orchestration of security services. Protect Evolved Programmable Network, Evolved Services Platform, and Application Centric Infrastructure architectures.

Platform Image Support

The Cisco Firepower NGFW includes Application Visibility and Control (AVC), optional Next-Gen IPS (NGIPS), Cisco Advanced Malware Protection (AMP) for Networks, and URL Filtering. The Cisco Firepower 4100 Series appliances use the Cisco Firepower Threat Defense software image. Alternatively, Cisco Firepower 4100 Series appliances can support the Cisco Adaptive Security Appliance (ASA) software image.

Management Options

Cisco Firepower NGFWs may be managed in a variety of ways depending on the way you work, your environment, and your needs.

The Cisco Firepower Management Center (formerly FireSIGHT) provides centralized management of the Cisco Firepower NGFW, the Cisco Firepower NGIPS, and Cisco AMP for Networks. It also provides threat correlation for network sensors and Advanced Malware Protection (AMP) for Endpoints.

The Cisco Firepower Device Manager is available for local management of 2100 Series and select 5500-X Series devices running the Cisco Firepower Threat Defense software image.

The Cisco Adaptive Security Device Manager is available for local management of the Cisco Firepower 2100 Series, 4100 Series, Cisco Firepower 9300 Series, and Cisco ASA 5500-X Series devices running the ASA software image.

Cisco Defense Orchestrator cloud-based management is also available for consistent policy management across Cisco security devices running the ASA software image, enabling greater management efficiency for the distributed enterprise.

Firepower DDoS Mitigation

The Cisco Firepower 9300 is a scalable (beyond 1 Tbps when clustered), carrier-grade, modular platform designed for service providers, high-performance computing centers, large data centers, campuses, high-frequency trading environments, and other environments that require low (less than 5-microsecond offload) latency and exceptional throughput. Cisco Firepower 9300 supports flow-offloading, programmatic orchestration, and the management of security services with RESTful APIs. It is also available in Network Equipment Building Standards (NEBS)-compliant configurations.

Cisco Firepower NGFW Virtual (NGFWv) Appliances

The Cisco Firepower 9300 Series is a family of four threat-focused NGFW security platforms. Their throughput range addresses data center and internet edge use cases. They deliver superior threat defense, at faster speeds, with a smaller footprint. Cisco Firepower 4100 Series supports flow-offloading, programmatic orchestration, and the management of security services with RESTful APIs. Network Equipment Building Standards (NEBS)-compliance is supported by the Cisco Firepower 4120 platform.

Cisco Trust Anchor Technologies

Cisco Trust Anchor Technologies provide a highly secure foundation for certain Cisco products. They enable hardware and software authenticity assurance for supply chain trust and strong mitigation against a man-in-the-middle compromise of software and firmware.

Trust Anchor capabilities include:

  • Image signing: Cryptographically signed images provide assurance that the firmware, BIOS, and other software are authentic and unmodified. As the system boots, the system’s software signatures are checked for integrity.
  • Secure Boot: Secure Boot anchors the boot sequence chain of trust to immutable hardware, mitigating threats against a system’s foundational state and the software that is to be loaded, regardless of a user’s privilege level. It provides layered protection against the persistence of illicitly modified firmware.
  • Trust Anchor module: A tamper-resistant, strong-cryptographic, single-chip solution provides hardware authenticity assurance to uniquely identify the product so that its origin can be confirmed to Cisco, providing assurance that the product is genuine.

Firepower DDoS Mitigation

Firepower DDoS Mitigation is provided by Radware Virtual DefensePro (vDP), available and supported directly from Cisco on the following Cisco Firepower 9300 and 4100 series appliances:

Cisco Firepower Model ASA image FTD Image
9300 - SM-44 Yes Yes
9300 - SM-36 Yes Yes
9300 - SM-24 Yes Yes

Radware vDP is an award-winning, real-time, behavioral DDoS attack mitigation solution that protects organizations against multiple DDoS threats. Firepower DDoS mitigation defends your application infrastructure against network and application degredation and outage.

DDoS Mitigation: Protection Set

Firepower’s vDP DDoS mitigation consists of patent-protected, adaptive, behavioral-based real-time signature technology that detects and mitigates zero-day network and application DDoS attacks in real time. It eliminates the need for human intervention and does not block legitimate user traffic when under attack.

The following attacks are detected and mitigated:

  • SYN flood attacks
  • Network DDoS attacks, including IP floods, ICMP floods, TCP floods, UDP floods, and IGMP floods
  • Application DDoS attacks, including HTTP floods and DNS query floods
  • Anomalous flood attacks, such as nonstandard and malformed packet attacks

Technical Specifications:

Cisco Firepower 9000 Series
Performance Firepower 9300 with 1 SM-24 Module Firepower 9300 with 1 SM-36 Module Firepower 9300 with 1 SM-44 Module Firepower 9300 with 3 SM-44 Module
Throughput: FW + AVC 30 Gbps 42 Gbps 54 Gbps 135 Gbps
Throughput: AVC + IPS 24 Gbps 34 Gbps 53 Gbps 133 Gbps
Maximum concurrent sessions, with AVC 30 million 30 million 30 million 60 million
Maximum new connections per second, with AVC 120,000 160,000 300,000 900,000
IPSec VPN Throughput (1024B TCP w/Fastpath) 13.5 Gbps 16 Gbps 17 Gbps 51 Gbps
Maximum VPN Peers 20000 20000 20000 60000
Cisco Firepower Device Manager (local management) - - - -
Centralized management Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator
Application Visibility and Control (AVC) Standard, supporting more than 4000 applications, as well as geolocations, users, and websites
AVC: OpenAppID support for custom, open source, application detectors Standard
Cisco Security Intelligence Standard, with IP, URL, and DNS threat intelligence
Cisco Firepower NGIPS Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
Cisco AMP for Networks Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco AMP for Endpoints is also optionally available
Cisco AMP Threat Grid sandboxing Available
URL Filtering: number of categories More than 80
URL Filtering: number of URLs categorized More than 280 million
Automated threat feed and IPS signature updates Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos Group
Third-party and open-source ecosystem Open API for integrations with third-party products; Snort and OpenAppID community resources for new and specific threats
High availability and clustering Active/standby; for Cisco Firepower 9300 intrachassis clustering of up to 5 chassis is allowed; Cisco Firepower 4100 Series allows clustering of up to 6 chassis
VLANs maximum 1024
Cisco Trust Anchor Technologies ASA 5506-X, 5508-X, and 5516-X appliances, Firepower 2100 Series and Firepower 4100 Series and 9300 platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details
ASA Performance and Capabilities Firepower 9300 with 1 SM-24 Module Firepower 9300 with 1 SM-36 Module Firepower 9300 with 1 SM-44 Module Firepower 9300 with 3 SM-44 Module
Stateful inspection firewall throughput1 75 Gbps 80 Gbps 80 Gbps 234 Gbps
Stateful inspection firewall throughput (multiprotocol)2 50 Gbps 60 Gbps 60 Gbps 130 Gbps
Concurrent firewall connections 55 million 60 million 60 million 70 million
Firewall latency (UDP 64B microseconds) 3.5 3.5 3.5 3.5
New connections per second 800,000 1.2 million 1.8 million 4 million
IPsec VPN throughput (450B UDP L2L test) 15 Gbps 18 Gbps 20 Gbps 60 Gbps3
IPsec/Cisco AnyConnect/Apex site-to-site VPN peers 20,000 20,000 20,000 60,0003
Maximum number of VLANs 1024 1024 1024 1024
Security contexts (included; maximum) 10; 250 10; 250 10; 250 10; 250
High availability Active/active and active/standby
Clustering Up to 5 appliances with 3 security modules each
Scalability VPN Load Balancing, Firewall Clustering
Centralized management Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator
Adaptive Security Device Manager Web-based, local management for small-scale deployments
Hardware Firepower 9300 with 1 SM-24 Module Firepower 9300 with 1 SM-36 Module Firepower 9300 with 1 SM-44 Module Firepower 9300 with 3 SM-44 Module
Dimensions (H x W x D) 5.25 x 17.5 x 32 in. (13.3 x 44.5 x 81.3 cm)
Form factor (rack units) 3 Rack Units (3RU), fits standard 19-in. (48.3-cm) square-hole rack
Security module slots 3
I/O module slots 2 (within supervisor)
Supervisor Cisco Firepower 9000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 network module slots for I/O expansion
Security modules
  • Cisco Firepower 9000 Security Module 24 with 2 x SSDs in RAID-1 configuration
  • Cisco Firepower 9000 Security Module 36 with 2 x SSDs in RAID-1 configuration
Network modules
  • 8 x 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) network modules
  • 4 x 40 Gigabit Ethernet Quad SFP+ network modules
  • 2 x 100 Gigabit Ethernet Quad SFP28 network modules (double-wide, occupies both network module bays)

Note: Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for details.

Maximum number of interfaces Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules
Integrated network management ports 1 x Gigabit Ethernet copper port (on supervisor)
Serial port 1 x RJ-45 console
USB 1 x USB 2.0
Storage Up to 2.4 TB per chassis (800 GB per security module in RAID-1 configuration)
Fans 4 hot-swappable fans
Noise 75.5 dBA at maximum fan speed
Rack mountable Yes, mount rails included (4-post EIA-310-D rack)
Weight 105 lb (47.7 kg) with one security module; 135 lb (61.2 kg) fully configured
Temperature: operating
  • Up to 10,000 ft (3000 M): 32 to 104°F (0 to 40°C) for SM-24 module
  • 32 to 88°F (0 to 35°C) for SM-36 module at sea-level
  • Altitude adjustment notes:
  • For SM-36, maximum temp is 35⁰C, for every 1000 feet above sea level subtract 1⁰C
Temperature: NEBS operating
  • Long term: 0 to 45°C, up to 6,000 ft (1829 m)
  • Long term: 0 to 35°C, 6,000 to 13,000 ft (1829-3964 m)
  • Short term: -5 to 55°C, up to 6,000 ft (1829 m)
  • Note: Cisco Firepower 9300 NEBS compliance applies only to SM-24 configurations.
Temperature: nonoperating -40 to 149°F (-40 to 65°C); maximum altitude is 40,000 ft
Humidity: operating 5 to 95% noncondensing
Humidity: nonoperating 5 to 95% noncondensing
Altitude: operating SM-24: 0 to 13,000 ft (3962 m)
SM-36: 0 to 10,000 ft (3048 m); please see above Operating Temperature section for temperature adjustment notes
Altitude: nonoperating 40,000 ft (12,192 m)
Power Supplies AC power supply -48V DC power supply HVDC power supply
Input voltage 200 to 240V AC -40V to -60V DC* 240 to 380V DC
Maximum input current 15.5A to 12.9A 69A to 42A <14A at 200V
Maximum output power 2500W 2500W 2500W
Frequency 50 to 60 Hz - -
Efficiency (at 50% load) 92% 92% 92% (at 50% load)
Redundancy 1+1 1+1 1+1
NEBS, Regulatory, Safety, and EMC Compliance Firepower 9300 with 1 SM-24 Module Firepower 9300 with 1 SM-36 Module Firepower 9300 with 1 SM-44 Module Firepower 9300 with 3 SM-44 Module
NEBS Cisco Firepower 9300 is NEBS compliant with SM-24 Security Modules. Cisco Firepower 4120 is NEBS compliant.
Regulatory compliance Products comply with CE markings per directives 2004/108/EC and 2006/108/EC
  • UL 60950-1
  • CAN/CSA-C22.2 No. 60950-1
  • EN 60950-1
  • IEC 60950-1
  • AS/NZS 60950-1
  • GB4943
EMC: emissions
  • 47CFR Part 15 (CFR 47) Class A (FCC Class A)
  • AS/NZS CISPR22 Class A
  • EN55022 Class A
  • ICES003 Class A
  • VCCI Class A
  • EN61000-3-2
  • EN61000-3-3
  • KN22 Class A
  • CNS13438 Class A
  • EN300386
  • TCVN7189
EMC: Immunity
  • EN55024
  • CISPR24
  • EN300386
  • KN24
  • TVCN 7317
Key DDoS Performance Metrics Firepower 9300 with 1 Security Module Firepower 9300 with 2 Security Modules Firepower 9300 with 3 Security Modules
Maximum mitigation capacity/throughput 10 Gbps 20 Gbps 30 Gbps
Maximum legitimate concurrent sessions 209,000 Connections Per Second (CPS) 418,000 Connections Per Second (CPS) 627,000 Connections Per Second (CPS)
Maximum DDoS flood attack prevention rate 1,800,000 Packets Per Second (PPS) 3,600,000 Packets Per Second (PPS) 5,400,000 Packets Per Second (PPS)

*Minimum turn-on voltage is -44V DC
1 Throughput measured with User Datagram Protocol (UDP) traffic measured under ideal test conditions.
2 "Multiprotocol" refers to a traffic profile consisting primarily of TCP-based protocols and applications like HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS.
3 In unclustered configuration.


Download the Cisco Firepower NGFW Datasheet (PDF).

It appears you don't have a PDF plugin for this browser. No biggie... you can click here to download the PDF file.

Pricing Notes:

Cisco Products
Cisco Firepower 9300 NGFW Appliance
Cisco Firepower 9300 AC Chassis
Includes 2 power supply units + 4 fans + rack-mount kit (3RU; accommodates up to three security modules)
Our Price: Request a Quote
Cisco Firepower 9300 Security Module
Cisco 24 Physical Core Security Module (NEBS Ready)
Our Price: Request a Quote
Cisco 36 Physical Core Security Module
Our Price: Request a Quote
Cisco 44 Physical Core Security Module
Our Price: Request a Quote