Cisco Firepower 1120 Getting Started

DescriptionFeature
Firewall and IPS Features
You can use FDM to configure the Network Analysis Policy (NAP)
when running Snort 3. Network analysis policies control traffic
preprocessing inspection. Inspectors prepare traffic to be further
inspected by normalizing traffic and identifying protocol anomalies.
You can select which NAP is used for all traffic, and customize the
settings to work best with the traffic in your network. You cannot
configure the NAP when running Snort 2.
We added the Network Analysis Policy to the Policies > Intrusion
settings dialog box, with an embedded JSON editor to allow direct
changes, and other features to let you upload overrides, or download
the ones you create.
Network Analysis Policy (NAP)
configuration for Snort 3.
You can use an FQDN network object, such as one specifying
www.example.com, as the translated destination address in manual NAT
rules. The system configures the rule based on the IP address returned
from the DNS server.
Manual NAT support for
fully-qualified domain name
(FQDN) objects as the translated
destination.
You can configure active authentication for identity policy rules to
redirect the user’s authentication to a fully-qualified domain name
(FQDN) rather than the IP address of the interface through which the
user’s connection enters the device. The FQDN must resolve to the IP
address of one of the interfaces on the device. By using an FQDN, you
can assign a certificate for active authentication that the client will
recognize, thus avoiding the untrusted certificate warning users get when
being redirected to an IP address. The certificate can specify the FQDN,
a wildcard FQDN, or multiple FQDNs in the Subject Alternate Names
(SAN) in the certificate.
We added the Redirect to Host Name option in the identity policy
settings.
Improved active authentication for
identity rules.
VPN Features
You can configure a site-to-site VPN connection to include remote
backup peers. If the primary remote peer is unavailable, the system will
try to re-establish the VPN connection using one of the backup peers.
You can configure separate pre-shared keys or certificates for each
backup peer. Backup peers are supported for policy-based connections
only, and are not available for route-based (virtual tunnel interface)
connections.
We updated the site-to-site VPN wizard to include backup peer
configuration.
Backup remote peers for site-to-site
VPN.
Getting Started
4
Getting Started
New Features in FDM/FTD Version 7.1.0

Cisco Firepower 1120 Specifications

General

Processor cores	12
Processor family	Intel
Built-in processor	Yes
Firewall throughput	1500 Mbit/s
Wi-Fi	No
IPSec VPN throughput	1 Gbit/s
Maximum firewall connections	200000
Maximum firewall connections per second	75000
Supported network protocols	SMTP
Console port	RJ-45
Connectivity technology	Wired
Number of console ports	1
SFP module slots quantity	4
Ethernet LAN (RJ-45) ports	8
SSD capacity	200 GB
Storage media type	SSD
Form factor	1U
Input current	2 A
AC input voltage	100-240 V
AC input frequency	50 - 60 Hz
Power consumption (max)	100 W
Operating altitude	0 - 3000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	0 - 40 °C
Operating relative humidity (H-H)	10 - 90 %
Country of origin	Mexico
Quantity per pack	1 pc(s)
Harmonized System (HS) code	85176990
Package depth	1409.7 mm
Package width	990.6 mm
Package height	457.2 mm
Package weight	5782.31 g

Weight and Dimensions

Depth	436.9 mm
Width	268.7 mm
Height	43.7 mm