Cisco Firepower 1010 Manuel

Cisco Firepower 1010 Hardware Installation Guide

First Published: 2019-07-24

Last Modified: 2022-03-21

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on

age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that

is hardcoded in the user interfaces of the product software, language used based on standards documentation, or language that is used by a referenced third-party product.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Overview 1

CHAPTER 1

Features 1

Package Contents 5

QR Code Sticker 6

Serial Number Location 7

Front Panel 7

Rear Panel 7

Status LEDs 8

Hardware Specifications 11

Product ID Numbers 12

Power Cord Specifications 12

Installation Preparation 19

CHAPTER 2

Installation Warnings 19

Position the Chassis 22

Safety Recommendations 23

Maintain Safety with Electricity 23

Prevent ESD Damage 24

Site Environment 24

Site Considerations 24

Power Supply Considerations 25

Rack Configuration Considerations 25

Mount the Chassis 27

CHAPTER 3

Unpack and Inspect the Chassis 27

Desktop-Mount the Chassis 28

Cisco Firepower 1010 Hardware Installation Guide

iii

Wall-Mount the Chassis 28

Rack-Mount the Chassis 31

Connect to the Console Port 37

CHAPTER 4

Connect to the Console Port with Microsoft Windows 37

Connect to the Console Port with Mac OS X 39

Connect to the Console Port with Linux 39

Installation, Maintenance, and Upgrade 41

CHAPTER 5

Install the FIPS Opacity Shield 41

Cisco Firepower 1010 Hardware Installation Guide

Contents

CHAPTER 1

Overview

•Features, on page 1

•Package Contents, on page 5

•QR Code Sticker, on page 6

•Serial Number Location, on page 7

•Front Panel, on page 7

•Rear Panel, on page 7

•Status LEDs, on page 8

•Hardware Specifications, on page 11

•Product ID Numbers, on page 12

•Power Cord Specifications, on page 12

Features

The Cisco Firepower 1010 security appliance is an NGFW desktop product in the Cisco Firepower family of

devices with Power over Ethernet (PoE+) and L2 switch support.

The PoE+ and L2 switch features are supported starting with Firepower Threat Defense (FTD) Version 6.5

and ASA Version 9.13.

Note

See the Cisco Firepower Compatibility Guide, which provides Cisco Firepower software and hardware

compatibility, including operating system and hosting environment requirements, for each supported Firepower

version.

See Product ID Numbers, on page 12 for a list of the product IDs (PIDs) associated with the Firepower 1010.

The following figure shows the Cisco Firepower 1010.

Cisco Firepower 1010 Hardware Installation Guide

Figure 1: Cisco Firepower 1010

The following table lists the features for the Firepower 1010.

Table 1: Firepower 1010 Features

DescriptionFeature

• Certified on FTD 6.4.xand FX-OS 2.6.x:

•Common Criteria Certification for the Network Device Collaborative Protection

Profile, (NDcPPv2.2E)

• IPS Extended Package (IPSEP v2.11)

• Firewall Collaborative Protection Profile Module (MOD_FW_v1.4e)

• Virtual Private Network Gateway Protection Profile Module

(MOD_VPNGW_v1.1)

• Federal Information Processing Standards (FIPS) 140-2 on FTD 6.4.xand FX-OS

2.6.x

• Department of Defense Information Network Approved Product List (DoDIN APL)

•US Government Compliance for IPv6 (USGv6) on FTD 7.0.x— Certification Approval

under the R1 Profile for the Product Classification “NPP.”

See the "Security Certifications Compliance" topic in the "Appliance Platform Settings"

chapter in the Firepower Management Center Configuration Guide, Version 6.7 for the

instructions on how to enable security certifications compliance.

Security

standards

certifications

1 RUForm factor

Desktop mount

Wall mount (Cisco part number 69-100647-01)

Rack mount (Cisco part number 800-107605-01)

Mounting

Side-to-side

No fan

Because the Firepower 1010 has no fan, the internal system temperature is

significantly higher than the ambient temperature cited in Hardware

Specifications, on page 11.

Note

Airflow

Cisco Firepower 1010 Hardware Installation Guide

Overview

Features

One 4-core Intel CPUProcessor

8-GB DDR4 DRAMMemory

8 GB (internal)Boot partition

Marvell SOHO 88E6390

First supported in Firepower Version 6.5 and ASA Version 9.13.

Note

L2 switch

One Gigabit Ethernet RJ-45 10/100/1000 BaseT

Restricted to network management access; connect with an RJ-45 cable

Management

port

One RJ-45

Use to access management through an external system

Console port

One USB Mini B

Use to access management through an external system

USB Mini B

port

One USB 3.0 Type A

Use to attach an external device such as storage

USB port

Eight Gigabit Ethernet RJ-45 10/100/1000 BaseT

Each RJ-45 (8P8C) copper port supports auto Medium Dependent Interface Crossover

(MDI/X) as well as auto-negotiation for interface speed, duplex, and other negotiated

parameters, and are MDI/X-compliant.

The ports are numbered (from top to bottom, left to right) 1, 2, 3, 4, 5, 6, 7, 8. Each port

includes a pair of LEDs, one each for connection status and link status. The ports are

named and numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/8.

You can use ports 7 and 8 as PoE+ ports. PoE+ is first supported in Firepower

Version 6.5 and ASA Version 9.13.

Note

Network ports

Ports 7 and 8 are PoE+ ports; first supported in Firepower Version 6.5 and ASA

Version 9.13.

Note

PoE+ controller

card

Accepts a standard Kensington T-bar locking mechanism for securing the chassisLock slot

A small recessed button that if pressed for longer than three seconds resets the chassis to

its default state following the next reboot. Configuration variables are reset to factory

default, but the flash is not erased and no files are removed.

Reset button

System power is controlled by the power cord; there is no power button. To shut down

the Firepower 1010, remove the AC power supply.

Power switch

The chassis is powered on when you plug in the AC power supply.Power cord

socket

Cisco Firepower 1010 Hardware Installation Guide

Overview

Features

One external AC power supply

The power supply has a total of 115 W of power. There is 55 W of +12-V system power

and 60 W of -53.5-V PoE+ power.

PoE+ is first supported in Firepower Version 6.5 and ASA Version 9.13.

Note

Use the power supply (part number 341-100765-01) that shipped with the

chassis. It supports PoE+.

Note

AC power

supply

One 200-GB M.2 SATA SSD drive

The drive is used by the software; there is no user access to the drive.

The drive is not field-replaceable; you must return the chassis to Cisco for drive

replacement.

Storage

Four rubber feet on the bottom of the chassis

The rubber feet are needed for proper cooling. Do not remove them.

Note

Rubber feet

Console Ports

The Firepower 1010 has two external console ports, a standard RJ-45 port and a USB Mini B serial port.

Only one console port can be active at a time. When a cable is plugged into the USB console port, the

RJ-45 port becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45

port becomes active. The console ports do not have any hardware flow control. You can use the CLI to

configure the chassis through either serial console port by using a terminal server or a terminal emulation

program on a computer.

• RJ-45 (8P8C) port—Supports RS-232 signaling to an internal UART controller. The RJ-45 console

port does not support a remote dial-in modem. You can use a standard management cable (Cisco

part number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.

•USB Mini B port—Lets you connect to a USB port on an external computer. For Linux and Macintosh

systems, no special driver is required. For Windows systems, you must download and install a USB

driver (available on software.cisco.com). You can plug and unplug the USB cable from the console

port without affecting Windows HyperTerminal operations. We recommend shielded USB cables

with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800, 9600,

19200, 38400, 57600, and 115200 bps.

For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC

connected to the console port before using the USB console port. See Connect to the Console Port with

Microsoft Windows, on page 37 for information on installing the driver.

Note

External Flash Storage

The chassis contains a standard USB Type A port that you can use to attach an external device. The USB

port can provide output power of 5 V and up to a maximum of 1A (5 USB power units).

• External USB drive (optional)—You can use the external USB Type A port to attach a data-storage

device. The external USB drive identifier is disk1. When the chassis is powered on, a connected

USB drive is mounted as disk1 and is available for you to use. Additionally, the file-system

Cisco Firepower 1010 Hardware Installation Guide

Overview

Features

commands that are available to disk0 are also available to disk1, including copy,format,delete,

mkdir,pwd,cd, and so on.

• FAT-32 File System—The Firepower 1010 only supports FAT-32-formatted file systems for the

external USB drive. If you insert an external USB drive that is not in FAT-32 format, the system

mounting process fails, and you receive an error message. You can enter the command format

disk1: to format the partition to FAT-32 and mount the partition to disk1 again; however, data might

be lost.

Package Contents

The following figure shows the package contents for the Firepower 1010. Note that the contents are subject

to change and your exact contents might contain additional or fewer items.

Figure 2: Firepower 1010 Package Contents

USB console cable (Type A to Mini Type B)

Part number 37-19770-01

2Chassis1

Power supply4Power cord

See Power Cord Specifications, on page 12 for

a list of the approved power cords.

—Cisco Firepower 1010

This document has a URL pointing to the

hardware installation guide, a URL pointing to

the regulatory and safety guide, and a QR code

and URL pointing to the Getting Started Guide.

Cisco Firepower 1010 Hardware Installation Guide

Overview

Package Contents

QR Code Sticker

The QR code sticker on the front panel of the chassis points to the Firepower Easy Deployment Guide for

Cisco Firepower 1000 or 2100 Firewalls that explains low touch provisioning (LTP). LTP allows anyone to

connect a new Firepower 1010 to a network so that the IT department can onboard the device to CDO and

configure it remotely. CDO supports Firepower Threat Defense (FTD) version 6.7 and later.

The following figure shows the QR code sticker.

Figure 3: QR Code Sticker

The following figure shows the placement of the QR code sticker on the front panel of the chassis.

Figure 4: Firepower 1010 QR Code Sticker

—QR code sticker1

Cisco Firepower 1010 Hardware Installation Guide

Overview

QR Code Sticker

Autres manuels pour Firepower 1010

Table des matières

Autres manuels Cisco Pare-feu

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuel utilisateur

Cisco

Cisco Firepower 3500 Document technique

Cisco

Cisco TelePresence Server 7010 Manuel utilisateur

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuel utilisateur

Cisco

Cisco Cisco ASA Series Manuel utilisateur

Cisco

Cisco 3110 Manuel

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manuel utilisateur

Cisco

Cisco ASA 5506-X Manuel utilisateur

Cisco

Cisco RV120W Mode d’emploi

Cisco

Cisco Meraki MX64 Manuel utilisateur

Cisco

Cisco Cisco ASA 5500 Series Manuel utilisateur

Cisco

Cisco Firepower 2100 Series Manuel utilisateur

Cisco

Cisco Small Business RV220W Mode d’emploi

Cisco

Cisco PIX 501 Manuel utilisateur

Cisco

Cisco PIX 501 - Security Appliance Manuel utilisateur

Cisco

Cisco Firepower 9300 Manuel

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manuel utilisateur

Cisco

Cisco Spam Manuel utilisateur

Cisco

Cisco PIX-525-UR-BUN - PIX 525 Unrestricted Bundle Manuel utilisateur

Cisco

Cisco ASA 5506-X Instructions d'installation

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuel utilisateur

Cisco

Cisco S190 Manuel utilisateur

Cisco

Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Manuel utilisateur

Cisco

Cisco ISA3000-4C-K9 Manuel

Manuels Pare-feu populaires d'autres marques

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur

GTA

GTA GB-200 Manuel utilisateur

Trend Micro

Trend Micro Deep Edge Manuel utilisateur