Cisco Firepower 1120 Getting Started

DescriptionFeature
You can enable password management for remote access VPN. This
allows AnyConnect to prompt the user to change an expired password.
Without password management, users must change expired passwords
directly with the AAA server, and AnyConnect does not prompt the user
to change passwords. For LDAP servers, you can also set a warning
period to notify users of upcoming password expiration.
We added the Enable Password Management option to the authentication
settings for remote access VPN connection profiles.
Password management for remote
access VPN (MSCHAPv2).
When you use SAML as the primary authentication method for a remote
access VPN connection profile, you can elect to have the AnyConnect
client use the client’s local browser instead of the AnyConnect embedded
browser to perform the web authentication. This option enables single
sign-on (SSO) between your VPN authentication and other corporate
logins. Also choose this option if you want to support web authentication
methods, such as biometric authentication, that cannot be performed in
the embedded browser.
We updated the remote access VPN connection profile wizard to allow
you to configure the SAML Login Experience.
AnyConnect VPN SAML External
Browser
Administrative and Troubleshooting Features
You can configure DDNS for the interfaces on the system to send
dynamic updates to DNS servers. This helps ensure that FQDNs defined
for the interfaces resolve to the correct address, making it easier for
users to access the system using a hostname rather than an IP address.
This is especially useful for interfaces that get their addresses using
DHCP, but it is also useful for statically-addressed interfaces.
After upgrade, if you had used FlexConfig to configure DDNS, you
must redo your configuration using FDM or the Firepower Threat
Defense API, and remove the DDNS FlexConfig object from the
FlexConfig policy, before you can deploy changes again.
If you configure DDNS using FDM, then switch to FMC management,
the DDNS configuration is retained so that FMC can find the system
using the DNS name.
In FDM, we added the System Settings > DDNS Service page. In the
Firepower Threat Defense API, we added the DDNSService and
DDNSInterfaceSettings resources.
Dynamic Domain Name System
(DDNS) support for updating
fully-qualified domain name
(FQDN) to IP address mappings for
system interfaces.
To look up the IP address of a fully-qualified domain name (FQDN) in
the device CLI, use the dig command. The nslookup command has been
removed.
The dig command replaces the
nslookup command in the device
CLI.
Getting Started
5
Getting Started
New Features in FDM/FTD Version 7.1.0

Cisco Firepower 1120 Specifications

General

Processor cores	12
Processor family	Intel
Built-in processor	Yes
Firewall throughput	1500 Mbit/s
Wi-Fi	No
IPSec VPN throughput	1 Gbit/s
Maximum firewall connections	200000
Maximum firewall connections per second	75000
Supported network protocols	SMTP
Console port	RJ-45
Connectivity technology	Wired
Number of console ports	1
SFP module slots quantity	4
Ethernet LAN (RJ-45) ports	8
SSD capacity	200 GB
Storage media type	SSD
Form factor	1U
Input current	2 A
AC input voltage	100-240 V
AC input frequency	50 - 60 Hz
Power consumption (max)	100 W
Operating altitude	0 - 3000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	0 - 40 °C
Operating relative humidity (H-H)	10 - 90 %
Country of origin	Mexico
Quantity per pack	1 pc(s)
Harmonized System (HS) code	85176990
Package depth	1409.7 mm
Package width	990.6 mm
Package height	457.2 mm
Package weight	5782.31 g

Weight and Dimensions

Depth	436.9 mm
Width	268.7 mm
Height	43.7 mm