Contents

Firepower Datasheet

Firepower Datasheet

The purpose of this document is to provide an overview of platform limits and limitations for the Cisco Firepower platform. I created this overview to document information that is available from different CiscoLive presentations, administration guides and Cisco datasheets.

Hardware End-of-Life

ASA

Model Replacement ASA FPS FTD
ASA 5505 FPR1010 9.2 N/A N/A
ASA 5506-X FPR1010 TBD 6.2.3 6.2.3
ASA 5512-X FPR1120 9.9.2 6.2.3 6.2.3
ASA 5515-X FPR1140 9.12 6.4 6.4
ASA 5525-X FPR1100 9.14 6.6 6.6
ASA 5545-X FPR1100 9.14 6.6 6.6
ASA 5555-X FPR1100 9.14 6.6 6.6
ASA 5585-X FPR1100 9.12 6.4 N/A

Firepower

Model Replacement ASA FTD
Firepower 7000 Firepower 1140/1150/2000 N/A 6.4
Firepower 8000 Firepower 9300 (SM40/48/56) N/A 6.4
Firepower 4120 Firepower 4125 9.16 6.8
Firepower 4140 Firepower 4145 9.16 6.8
Firepower 4150 Firepower 4155 9.16 6.8
Firepower 9300 (SM24) Firepower 9300 (SM40) 9.16 6.8
Firepower 9300 (SM36) Firepower 9300 (SM48) 9.16 6.8
Firepower 9300 (SM44) Firepower 9300 (SM56) 9.16 6.8

Management Center

Model Replacement FPS FTD
FMC 1000 FMC 1600 6.8 6.8
FMC 2500 FMC 2600 6.8 6.8
FMC 4500 FMC 4600 6.8 6.8

Multi Instance Mode

Hardware Support

Multi-Instance Mode is only supported on Firepower 4100 & 9300 platforms. Firepower 1000 & 2100 do not support multi-instance mode

Model Max. Container Instances Available CPU Cores Available RAM Available Disk Space
Firepower 4110 3 22 53 GB 125.6 GB
Firepower 4112 3 22 78 GB 308 GB
Firepower 4115 7 46 162 GB 308 GB
Firepower 4120 3 46 101 GB 125.6 GB
Firepower 4125 10 62 162 GB 644 GB
Firepower 4140 7 70 222 GB 311.8 GB
Firepower 4145 14 86 344 GB 608 GB
Firepower 4150 7 86 222 GB 311.8 GB
Firepower 9300 SM-24 security module 7 46 226 GB 656.4 GB
Firepower 9300 SM-36 security module 11 70 222 GB 640.4 GB
Firepower 9300 SM-40 security module 13 78 334 GB 1359 GB
Firepower 9300 SM-44 security module 14 86 218 GB 628.4 GB
Firepower 9300 SM-48 security module 15 94 334 GB 1341 GB
Firepower 9300 SM-56 security module 18 110 334 GB 1314 GB

Software limitations

  • ASA Software is not supported
  • Multi-Instance is not supported on Firepower Device Manager
  • Data sharing interfaces are not supported in a cluster
  • Intra-Chassis high availability (active/standby) is not supported on Firepower 9300
  • Inter-Chassis high availability is only supported between same hardware models
  • Container instances within a high availability pair must use the same resource profile attributes
  • Radware DefensePro link decorator is not supported (no service chaining)
  • FMC UCAPL/CC mode is not supported
  • Flow offload to Smart NICs is not supported
  • If Subinterfaces are used for failover link other subinterfaces on the same parent interface cannot be used for data interfaces

Software limits

  • TLS crypto acceleration on up to 16 instances
  • Max 14 instances per shared interface (e.g. Po1 shared between instance 1 through 14)
  • Mac 10 shared interfaces per instance (e.g. Po1.1 through Po1.10)
  • Up to 500 VLAN IDs can be created per physical interface

Access Control Rules

Platform Recommended Limit
ASA 5506-X 12.500
ASA 5508-X 50.000
ASA 5516-X 125.000
ASA 5525-X 150.000
ASA 5545-X 250.000
ASA 5555-X 250.000
Firepower 1010 15.000
Firepower 1120 125.000
Firepower 1140 150.000
Firepower 1150 250.000
Firepower 2110 50.000
Firepower 2120 75.000
Firepower 2130 300.000
Firepower 2140 375.000
Firepower 4110 2.250.000
Firepower 4115 2.500.000
Firepower 4120 2.250.000
Firepower 4125 2.750.000
Firepower 4140 2.250.000
Firepower 4145 3.000.000
Firepower 4150 3.000.000
Firepower 9300 SM-24 2.250.000
Firepower 9300 SM-36 2.250.000
Firepower 9300 SM-40 6.000.000
Firepower 9300 SM-44 3.000.000
Firepower 9300 SM-48 6.000.000
Firepower 9300 SM-56 6.000.000