Product Brief
FPR9K-SM-56 (Figure 1) Crypto Security Module for Cisco Firepower 9000 Series provides high-performance hardware encryption, ensuring secure data protection and compliance for enterprise networks.
Figure 1 FPR9K-SM-56
Key Feature
-
Modular Chassis Design: Supports multiple security modules for scalability.
-
High-Performance Throughput: Optimized for data-intensive environments.
-
Flexible I/O Options: Customizable with a variety of network interface modules.
-
Multiple Security Services: Run services like firewall, IPS, and VPN simultaneously.
-
FXOS-Based: Powered by Firepower eXtensible Operating System (FXOS).
-
Application Versatility: Supports Cisco ASA and Firepower Threat Defense (FTD).
Use Case
-
Core/Aggregation Layer Deployment in High Availability:
Position the Firepower 9300 at the core or aggregation layer of a three-tier data center, providing high availability for robust security performance. -
Multifunction Security Service in Converged Infrastructure:
Utilize the Firepower 9300 as a dedicated security appliance within converged infrastructure environments (such as vBlock or FlexPod), deployed at the access layer to enhance security. -
High-Performance Security at the WAN Edge:
Deploy the Firepower 9300 as a high-performance security gateway between the WAN edge and data center core, ensuring high availability and comprehensive threat protection. -
Leaf in a Spine/Leaf Architecture for Security:
Integrate the Firepower 9300 as a leaf node dedicated exclusively to security services in a spine/leaf data center design, ensuring security functions are streamlined and isolated.
Table 1 FTD software performance and capabilities on Cisco Firepower 9300
| Feature | SM-40 | SM-48 | SM-56 | 3 × SM-56 |
|---|---|---|---|---|
| Firewall + AVC Throughput (1024B) | 55 Gbps | 65 Gbps | 70 Gbps | 190 Gbps |
| Firewall + AVC + IPS Throughput (1024B) | 55 Gbps | 65 Gbps | 68 Gbps | 190 Gbps |
| Max Concurrent Sessions (with AVC) | 35 million | 35 million | 35 million | 60 million |
| Max New Connections/sec (with AVC) | 380K | 450K | 490K | 1.1M |
| TLS (Hardware Decryption) | 10 Gbps | 11 Gbps | 12 Gbps | 28 Gbps |
| NGIPS Throughput (1024B) | 60 Gbps | 68 Gbps | 73 Gbps | 190 Gbps |
| IPSec VPN Throughput (1024B TCP / Fastpath) | 27 Gbps | 33 Gbps | 36 Gbps | 110 Gbps¹ |
| Maximum VPN Peers | 20,000 | 20,000 | 20,000 | 60,000 |
Table 2 ASA software performance and capabilities on Cisco Firepower 9300
| Feature | SM-40 | SM-48 | SM-56 | 3 × SM-56 |
|---|---|---|---|---|
| Stateful Inspection Firewall Throughput | 80 Gbps | 80 Gbps | 80 Gbps | 235 Gbps |
| Stateful Firewall Throughput (Multiprotocol) | 55 Gbps | 60 Gbps | 64 Gbps | 172 Gbps |
| Concurrent Firewall Connections | 55 million | 60 million | 60 million | 195 million |
| Firewall Latency (UDP 64B, µs) | 3.5 µs | 3.5 µs | 3.5 µs | 3.5 µs |
| New Connections Per Second | 1.6 million | 1.8 million | 2 million | 4.75 million |
| IPsec VPN Throughput (450B UDP, L2L Test) | 25 Gbps | 27 Gbps | 30 Gbps | 74 Gbps |
| Maximum VPN Peers | 20,000 | 20,000 | 20,000 | 60,000 |
| Security Contexts (Included; Maximum) | 10; 250 | 10; 250 | 10; 250 | 10; 250 |
Table 3 Shipping Box Contents
| Item | Quantity |
|---|---|
| Firepower 9300 chassis | 1 |
| Blue console cable PC terminal adapter | 1 |
| Power cords (country specific) | 2 |
| Rack static rails (Adjusts to fit racks with a 24 in. to 36 in. front-to-rear rail span) | 2 |
| 10-32 x 0.5 inch screws used to attach the rails to the rack | 4 |
| 10-32 retention nuts for rack-mounting | 4 |
| 10-32 x 0.75 inch Philips head screws used to attach the chassis to the rack | 4 |
| 10/100/1000BASE-T SFP transceiver | 1 |
| Ground lug #6 AWG, 90 degree, #10 post | 1 |
| 10-32 x 0.375 inch screws used to attach the ground lug | 2 |
| Cisco Firepower 9300 Document | 1 |
Table 4 Hardware Specification
| Specification | Description |
|---|---|
| Dimensions (H x W x D) | 5.25 x 17.5 x 32 in. (13.3 x 44.5 x 81.3 cm) |
| Form Factor | 3 Rack Units (3RU), fits standard 19-in. (48.3 cm) square-hole rack |
| Security Module Slots | 3 |
| Network Module Slots | 2 (within supervisor) |
| Supervisor | Cisco Firepower 9000 Supervisor with 8 x 10 GE ports and 2 network module slots |
| Security Modules | ● SM-40 with 2 x SSDs (RAID-1) ● SM-48 with 2 x SSDs (RAID-1) ● SM-56 with 2 x SSDs (RAID-1) |
| Network Modules | ● 8 x 10 GE SFP+ ● 4 x 40 GE QSFP+ ● 2 x 100 GE QSFP28 ● 4 x 100 GE QSFP28 ● 6-port 10 GE SR FTW ● 6-port 10 GE LR FTW ● 2-port 40 GE SR FTW |
| Max Interfaces | Up to 24 x 10 GE (SFP+) Up to 8 x 40 GE (QSFP+) Up to 8 x 100 GE (QSFP28) Up to 24 x 1 GE (SFP) |
| Integrated Management Ports | 1 x Gigabit Ethernet copper (on supervisor) |
| Serial Port | 1 x RJ-45 console |
| USB Port | 1 x USB 2.0 |
| Storage | Up to 4.8 TB per chassis (1.6 TB per SM in RAID-1) |
| Power Supply Options | AC / -48V DC / HVDC |
| Input Voltage | AC: 200–240V DC: -40 to -60V HVDC: 240–380V |
| Max Input Current | AC: 15.5A to 12.9A DC: 69A to 42A HVDC: <14A @ 200V |
| Max Output Power | 2500W (all types) |
| Frequency | 50 to 60 Hz (AC only) |
| Efficiency (at 50% load) | 92% (all power types) |
| Power Redundancy | 1+1 |
| Fans | 4 hot-swappable fans |
| Noise | 75.5 dBA (max fan speed) |
| Rack Mountable | Yes, includes mount rails (4-post EIA-310-D rack) |
| Weight | 105 lb (47.7 kg) with 1 SM 135 lb (61.2 kg) fully loaded |
| Operating Temperature | 32–104°F (0–40°C) for SM-40/SM-48 (up to 10,000 ft) SM-56: max 35°C; subtract 1°C per 1000 ft above sea level |
| Nonoperating Temperature | -40 to 149°F (-40 to 65°C); max altitude: 40,000 ft |
| Operating Humidity | 5 to 95% non-condensing |
| Nonoperating Humidity | 5 to 95% non-condensing |
Table 5 Ordeing Information
| Part Number | Description |
|---|---|
| FPR-C9300 | Firepower 9300 chassis, no power supply modules, no fan modules (spare) |
| FPR-C9300-AC | Firepower 9300 chassis for AC power |
| FPR-C9300-AC= | Firepower 9300 chassis for AC power, no power supply modules, no fan modules (spare) |
| FPR-C9300-DC | Firepower 9300 chassis for DC power, two power supply modules, four fan modules |
| FPR-C9300-DC= | Firepower 9300 chassis for DC power, two power supply modules, four fan modules (spare) |
| FPR-C9300-HVDC | Firepower 9300 chassis for HVDC power supply, two power supply modules, four fan modules |
| FPR-C9300-HVDC= | Firepower 9300 chassis for HVDC power, no power supply modules, no fan modules (spare) |
| FPR-C9300-FIPSKIT= | Firepower 9300 chassis FIPS kit (spare) |
| FPR9K-SUP | Firepower 9000 series Supervisor |
| FPR9K-SUP= | Firepower 9000 series Supervisor (spare) |
| FPR9K-SM-24 | Firepower 9000 series security module |
| FPR9K-SM-24= | Firepower 9000 series security module (spare) |
| FPR9K-SM-24-NEB | Firepower 9000 series NEBS security module |
| FPR9K-SM-24-NEB= | Firepower 9000 series NEBS security module (spare) |
| FPR9K-SM-36 | Firepower 9000 series high performance security module |
| FPR9K-SM-36= | Firepower 9000 series high performance security module (spare) |
| FPR9K-SM-40 | Firepower 9000 series Crypto security module |
| FPR9K-SM-40= | Firepower 9000 series Crypto security module (spare) |
| FPR9K-SM-40-NEB | Firepower 9000 series NEBS Crypto security module |
| FPR9K-SM-40-NEB= | Firepower 9000 series NEBS Crypto security module (spare) |
| FPR9K-SM-44 | Firepower 9000 series high performance security module |
| FPR9K-SM-44= | Firepower 9000 series high performance security module (spare) |
| FPR9K-SM-44-NEB | Firepower 9000 series NEBS security module |
| FPR9K-SM-44-NEB= | Firepower 9000 series NEBS security module (spare) |
| FPR9K-SM-48 | Firepower 9000 series Crypto security module |
| FPR9K-SM-48= | Firepower 9000 series Crypto security module (spare) |
| FPR9K-SM-48-NEB | Firepower 9000 series NEBS Crypto security module |
| FPR9K-SM-48-NEB= | Firepower 9000 series NEBS Crypto security module (spare) |
| FPR9K-SM-56 | Firepower 9000 series Crypto security module |
| FPR9K-SM-56= | Firepower 9000 series Crypto security module (spare) |
| FPR9K-SM-BLANK | Firepower 9000 series security module blank slot cover |
| FPR9K-SM-BLANK= | Firepower 9000 series security module blank slot cover (spare) |
| FPR9K-DNM-2X100G | Firepower 2-port 100-Gb double-wide network module |
| FPR9K-DNM-2X100G= | Firepower 2-port 100-Gb double-wide network module (spare) |
| FPR9K-DNM2X100G-RF | Firepower 2-port 100-Gb double-wide network module, REMANUFACTURED |
| FPR9K-NM-2X100G | Firepower 2-port 100-Gb single-wide network module |
| FPR9K-NM-2X100G= | Firepower 2-port 100-Gb single-wide network module (spare) |
| FPR9K-NM-4X100G | Firepower 4-port 100-Gb single-wide network module |
| FPR9K-NM-4X100G= | Firepower 4-port 100-Gb single-wide network module (spare) |
| FPR9K-NM-2X40G-F | Firepower 2-port 40-Gb SR hardware bypass network module |
| FPR9K-NM-2X40G-F= | Firepower 2-port 40-Gb SR hardware bypass network module (spare) |
| FPR9K-NM-4X40G | Firepower 9000 series 4-port 40-Gb QSFP+ network module |
| FPR9K-NM-4X40G= | Firepower 9000 series 4-port 40-Gb QSFP+ network module (spare) |
| FPR9K-NM-6X10LR-F | Firepower 6-port 10-Gb LR hardware bypass network module |
| FPR9K-NM-6X10LR-F= | Firepower 6-port 10-Gb LR hardware bypass network module (spare) |
| FPR9K-NM-6X10SR-F | Firepower 6-port 10-Gb SR hardware bypass network module |
| FPR9K-NM-6X10SR-F= | Firepower 6-port 10-Gb SR hardware bypass network module (spare) |
| FPR9K-NM-8X10G | Firepower 9000 series 8-port 10-Gb SFP+ network module |
| FPR9K-NM-8X10G= | Firepower 9000 series 8-port 10-Gb SFP+ network module (spare) |
| FPR9K-NM-BLANK | Firepower 9000 series network module blank slot cover |
| FPR9K-NM-BLANK= | Firepower 9000 series network module blank slot cover (spare) |
| FPR9K-NM-DV | Firepower 9000 series network module divider |
| FPR9K-PS-AC | Firepower 9000 series AC power supply module |
| FPR9K-PS-AC= | Firepower 9000 series AC power supply module (spare) |
| FPR9K-PS-DC | Firepower 9000 series DC power supply module |
| FPR9K-PS-DC= | Firepower 9000 series DC power supply module (spare) |
| FPR9K-PS-HVDC | Firepower 9000 series HVDC power supply module |
| FPR9K-PS-HVDC= | Firepower 9000 series HVDC power supply module (spare) |
| FPR9K-FAN | Firepower 9000 series fan module |
| FPR9K-FAN= | Firepower 9000 series fan module (spare) |
| FPR9K-SM-S800GS1 | Firepower 9000 series 800-GB SSD for the SM-24, SM-36, and SM-44 security modules |
| FPR9K-SM-S800GS1= | Firepower 9000 series 800-GB SSD for the SM-24, SM-36, and SM-44 security modules (spare) |
| FPR9K-SM-SSD1.6TB | Firepower 9000 series 1.6-TB SSD for the SM-40, SM-48, and SM-56 security modules |
| FPR9K-SM-SSD1.6TB= | Firepower 9000 series 1.6-TB SSD for the SM-40, SM-48, and SM-56 security modules (spare) |
| FPR9K-RMK | Firepower 9000 series rack-mount kit |
| FPR9K-RMK= | Firepower 9000 series rack-mount kit (spare) |