| Model |
CSF4245-TD-K9 |
| Hardware specifications |
| Maximum number of interface |
Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces |
| Up to 8 x 25 Gigabit Ethernet (SFP28) interfaces with 2 network modules |
| Up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules |
| Up to 24 x 1 Gigabit Ethernet ports (SFP) with 2 network modules and fixed ports |
| Up to 8 x 100 Gigabit Ethernet (QSFP28) interfaces with 2 network modules |
| Up to 4 x 400 Gigabit Ethernet (QSFPDD) interfaces with 2 network modules |
| Fixed Ports |
8 x 1/10/25 Gigabit Ethernet ports (SFP28) |
| Integrated network management ports |
2 x 1/10/25 Gigabit Ethernet ports (SFP28) |
| Storage |
1.8 TB x 2 |
| Serial port |
1 x RJ-45 console |
| USB |
1 x USB 2.0 |
| Dimensions (H x W x D) |
4.39 x 42.9 x 81.28 cm |
| Form factor (rack units) |
1RU |
| Network modules |
8 port 1Gbps copper. FTW (faito wire) Network Module |
| Ports that are not configured as FTW can be used as regular 1 Gb copper ports |
| 8 x 1/10 Gigabit Ethernet SmalForm-Factor pluggable (SFP+) network modules |
| 8 x 1/10/25 Gigabit Ethernet SmalForm-Factor pluggable (SFP28) network modules |
| 4 x 40 Gigabit Ethernet Quad SFP+ network modules |
| 4 x 40/100/200 Gigabit Ethernet Quad SFP28 (QSFP28) network modules |
| 2 x 100G Gigabit Ethernet QSFP SFP28 network modules |
| 6-port 10Gbps SR Fiber FTW (faito wire) Network Module |
| 6-port 10Gbps LR Fiber FTW (faito wire) Network Module |
| 6-port 25Gbps LR Fiber FTW (faito wire) Network Module |
| 6-port 25Gbps SR Fiber FTW (faito wire) Network Module |
| Power Supplies |
| Configuration |
Dual: 1900W for 220 AC, 1200W for 110 AC |
| AC input voltage |
Only 200 to 240 VAC (high line) |
| AC maximum input current |
14A, @ 100VAC or @ 200VAC |
| AC maximum output power |
1380W |
| AC frequency |
50/60 Hz (nominal) |
| AC efficiency |
> 90% (Platinum) |
| Redundancy |
1 + 1 |
| Fans |
3 Duals fan modules (FRU). Each module has two fans |
| Noise |
Sound Pressure: <=78 dBA (typical), <=84 dBA (maximum) |
| Rack mountable |
Yes, mount rails included (4-post EIA-310-D rack) |
| Weight |
46 lbs (19.5 kgs); 2 x power supplies; 2 x NMs, 3 x fan-modules; 36 lbs (16.3 kgs): no power supplies, no NMs, no fans |
| Temperature: operating |
32 to 102 ℉ (0 to 40℃), at sea level |
| Temperature: non-operating |
-40 to 149℉ (-40 to 65℃) |
| Humidity: operating |
5 to 95% non-condensing |
| Humidity:non-operating |
5 to 95% non-condensing |
| Altitude: operating |
10,000 ft (max) |
| Altitude: non-operating |
40,000 ft (max) |
| Performance specifications and feature highlights with the Cisco Secure Firewall Threat Defense (TD) image |
| Throughput: FW + AVC (1024B) |
140 Gbps |
| Throughput: FW + AVC + IPS (1024B) |
140 Gbps |
| Maximum concurrent sessions, with AVC |
60 Million |
| New connections Per Second with, AVC |
800K |
| TLS (Hardware Decryption) 1 |
45 Gbps |
| Throughput: NGIPS (1024B) |
140 Gbps |
| IPSec VPN Throughput (1024B TCP w/Fastpath) |
140 Gbps |
| Maximum VPN Peers |
30000 |
| Centralized Management |
Centralized configuration, logging, monitoring, and reporting are performed by the Firewall Management Center or alternatively in the cloud with Cisco Defense Orchestrator |
| Application Visibility and Control (AVC) |
Standard, Supporting more than 4000 applications, as well as gelocation, users, and websites |
| AVC: OpenAppID Support for custom, open source application detectors |
Standard |
| Cisco Security Intelligence |
Standard with IP, URL, and DNS Threat intelligence |
| Cisco Secure IPS |
Available: can passively detect endpoints and infrastructure for threat correlation an indicators of Compromise (IOC) intelligence |
| Cisco Malware Defense |
Available: enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks, integrated threat correlation with CISCO Secure Endpoint is also optionally available |
| Cisco Secure Malware Analytics |
Available |
| URL Filtering: Number of Categories |
More than 80 |
| URL Filtering: Number of URL categorized |
More than 280 million |
| Automated Threat Feed and IPS signature updates |
Yes: class-ending Collective Security Intelligence (CSI) from the Cisco Talos Group |
| Third-party and open-source ecosystem |
Open API for integrations with third-party products; Snort and OpenAppID community resources for new and specific threats |
| High Availability & Clustering |
Active/active (with clustering), Active/standby. |
| Cisco Secure Firewall 4200 Series allows clustering of up 16 chassis |
| Cisco Trust Anchor Technologies |
Secure Firewall 4200 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additional details |
Cisco Secure Firewall CSF4245-TD-K9 xử lý lưu lượng HTTPS được mã hóa như thế nào?
Thiết bị CSF4245-TD-K9 tích hợp TLS Hardware Decryption với hiệu năng lên đến 45 Gbps, cho phép giải mã và kiểm tra lưu lượng HTTPS để phát hiện các mối đe dọa ẩn trong dữ liệu mã hóa mà vẫn duy trì hiệu suất xử lý cao.
Lợi ích của việc hỗ trợ nhiều loại Network Module trên Cisco Secure Firewall CSF4245-TD-K9 là gì?
CSF4245-TD-K9 hỗ trợ các Network Module từ 1G, 10G, 25G, 40G đến 100G và 400G, giúp doanh nghiệp dễ dàng mở rộng hoặc thay đổi hạ tầng mạng theo từng giai đoạn mà không cần thay thế thiết bị, tối ưu chi phí đầu tư dài hạn.
Cisco Secure Firewall CSF4245-TD-K9 có phù hợp làm tường lửa biên cho trung tâm dữ liệu có lưu lượng rất lớn không?
Có. Với thông lượng Firewall + AVC + IPS đạt 140 Gbps, 60 triệu phiên kết nối đồng thời và 800.000 kết nối mới mỗi giây, CSF4245-TD-K9 đáp ứng tốt vai trò tường lửa biên cho các trung tâm dữ liệu hoặc mạng doanh nghiệp quy mô lớn có lưu lượng truy cập rất cao.