Cisco Firepower 4100 Series Manuel

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

First Published: 2016-03-31

Last Modified: 2018-11-16

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com

go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any

other company. (1721R)

CONTENTS

Overview 1

CHAPTER 1

Features 1

Deployment Options 4

Package Contents 4

Serial Number Location 5

Front Panel 6

Front Panel LEDs 7

Rear Panel 8

Network Modules 10

10-G Network Module 10

40-G Network Module 11

Hardware Bypass Network Modules 12

1-G Network Module with Hardware Bypass 13

40-G Network Module with Hardware Bypass 14

1-G SX/10-G SR/10-G LR Network Module with Hardware Bypass 16

Power Supply Modules 18

Fan Modules 20

Supported SFP/SFP+ and QSFP Transceivers 21

Hardware Specifications 23

Product ID Numbers 25

Power Cord Specifications 28

Installation Preparation 35

CHAPTER 2

Installation Warnings 35

Safety Recommendations 37

Maintain Safety with Electricity 38

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

iii

Prevent ESD Damage 38

Site Environment 39

Power Supply Considerations 39

Rack Configuration Considerations 39

Mount and Connect 41

CHAPTER 3

Unpack and Inspect the Chassis 41

Rack-Mount the Chassis 42

Ground the Chassis 46

Install the FIPS Opacity Shield 48

Connect Cables, Turn on Power, and Verify Connectivity 53

Maintenance and Upgrade 55

CHAPTER 4

Remove and Replace the Network Module 55

Remove and Replace the Fan Module 58

Remove and Replace the SSD 59

Remove and Replace the Power Supply Module 61

Connect the DC Power Supply Module 64

Secure the Power Cord on the AC Power Supply Module 70

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

Contents

CHAPTER 1

Overview

•Features, on page 1

•Deployment Options, on page 4

•Package Contents, on page 4

•Serial Number Location, on page 5

•Front Panel, on page 6

•Front Panel LEDs, on page 7

•Rear Panel, on page 8

•Network Modules, on page 10

•Hardware Bypass Network Modules, on page 12

•Power Supply Modules, on page 18

•Fan Modules, on page 20

•Supported SFP/SFP+ and QSFP Transceivers, on page 21

•Hardware Specifications, on page 23

•Product ID Numbers, on page 25

•Power Cord Specifications, on page 28

Features

The Cisco Firepower 4100 series security appliance is a standalone modular security services platform. It is

capable of running multiple security services simultaneously and so is targeted at the data center as a

multiservice platform. The series includes the Firepower 4110, 4120, 4140, and 4150. See Product ID Numbers,

on page 25 for a list of the product IDs (PIDs) associated with the 4100 series.

The Firepower 4100 supports the following software:

• Cisco Firepower Threat Defense

We recommend that you upgrade to the latest version (at least to Version 6.1.0)

to take advantage of software updates that enhance SSD management performance

and longevity.

Note

• Cisco Firepower eXtensible Operating System (FXOS)

• Cisco ASA

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

The Firepower 4100 is certified for Common Criteria (CC) and Federal Information Processing Standards

(FIPS). See "Security Certifications Compliance" in the Cisco FXOS CLI Configuration Guide for the procedure

for enabling these modes using the CLI. See "Security Certifications Compliance" in the Cisco FXOS Firepower

Chassis Manager Configuration Guide for information for enabling these modes using the Firepower Chassis

Manager.

Note

The following figure shows the Firepower 4100 series security appliance.

Figure 1: Firepower 4100 Series

See the Cisco Interactive Library for a video that displays the features and components of the Firepower 4100.

The following table lists the features for the Firepower 4100 series.

Table 1: Firepower 4100 Series Features

4150414041204110Feature

1 RU

Fits a standard 19-in. (48.3cm) square-hole rack

Form factor

Yes

Slide rails, mount ears, and screws included (4-post EIA-310-D rack)

Rack mount

Front to rear

Cold aisle to hot aisle

Airflow

Single 22-coreSingle 18-core

Single 12-coreProcessor

256-GB DDR4

DRAM

256-GB DDR4

DRAM

128-GB DDR4

DRAM

64-GB DDR4

DRAM

Memory

With two 8-port network modules installed

Maximum number

of interfaces

One Gigabit Ethernet

Supports 1-G fiber or copper SFPs

Management port

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

Overview

Features

4150414041204110Feature

One RJ-45 consoleSerial port

One USB 2.0 Type AUSB port

Eight fixed 1-G and 10-G SFP ports (named Ethernet 1/1 through 1/8)Network ports

Yes

Eight fixed 1-G and 10-G SFP ports

See Network Modules, on page 10 for the number of SFP/SFP+ ports for each network

module.

SFP ports

Yes

Displays the serial number; on the front panel

Pullout asset card

Yes

On rear panel

Grounding lug

Yes

On front panel

Locator beacon

Yes

On rear panel

Power switch

Yes

Two network module slots ( named network module 2 and network module 3)

Network modules

8-port 10-Gigabit Ethernet SFP+

4-port 40-Gigabit Ethernet QSFP+

8-port 1-Gigabit Ethernet SFP+ fail-to-wire

2-port 40-Gigabit Ethernet SFP+ fail-to-wire

6-port 1-Gigabit Ethernet SX fiber fail-to-wire

6-port 10-Gigabit Ethernet SR fiber fail-to-wire

6-port 10-Gigabit Ethernet LR fiber fail-to-wire

Supported network

modules

Two (1+1) power supply module slots

Ships with two 400-W AC power supply

modules

Hot-swappable

Two (1+1) power supply module slots

Ships with one 400-W AC power supply

modules

Hot-swappable

AC power supply

Yes (optional)NoDC power supply

Yes 1+1Redundant power

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

Overview

Features

4150414041204110Feature

Six fan module slots

3+1 redundancy

Hot-swappable

Fan

Two SSD slots (400 GB)

Ships with one SSD installed in slot 1.

RAID is not supported.

Note

Slot 2 is reserved for the MSP.

Two SSD slots (200 GB)

Ships with one SSD installed in slot 1.

RAID is not supported.

Note

Slot 2 is reserved for the Malware Storage

Pack (MSP).

Storage

Yes

Installed in the second SSD slot only

MSP

Deployment Options

Here are some examples of how you can deploy the Firepower 4100:

• In a data center using NGFW and ASA

• At the core/aggregation layer of a 3-tier data center in a high availability configuration

• As a dedicated multifunctional security service within converged infrastructure stacks, for example,

vBlock, FlexPod, and so forth, at the access layer

• As a high-performance data center security appliance between the WAN edge and the data center core

in a high availability configuration

• Inter-DC clustering deployments

• In newer spine/leaf data center designs, deployment as a leaf that exclusively offers security functions

Package Contents

The following figure shows the package contents for the Firepower 4100. Note that the contents are subject

to change and your exact contents might contain additional or fewer items.

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

Overview

Deployment Options

Figure 2: Firepower 4100 Package Contents

Blue console cable PC terminal adapter2Firepower 4100 chassis1

10/100/1000BASE-T SFP transceiver42 power cords (country-specific)3

Tie wrap clamp62 slide rails5

Flextronics tie wrap8Artesyn tie wrap7

Ten 8-32 x .375-in. countersink screws

used to secure the mounting bracket to

chassis (6 screws), and the cable

management brackets to the mounting

brackets (4 screws)

102 M3X6 mm screws used to secure the

inner slide rail to the chassis

Two 10-32 x .375-in. screws used to secure

the ground lug

122 slide rail locking brackets11

2 cable management brackets141 ground lug #6 AWG, 90 degree, #10 post13

Welcome to the Cisco Firepower 410015

Serial Number Location

The serial number for the Firepower 4100 series chassis is located on the pullout asset card on the front panel.

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

Overview

Serial Number Location

Figure 3: Serial Number on the 4100 Chassis

You can also view additional model information on the compliance label located on the bottom of the chassis.

Figure 4: Compliance Label on the 4100 Chassis

Front Panel

The following figure shows the front panel of the Firepower 4100.

Cisco Firepower 4110, 4120, 4140, and 4150 Hardware Installation Guide

Overview

Front Panel

Autres manuels pour Firepower 4100 Series

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Cisco Pare-feu

Cisco

Cisco Firepower 7010, Firepower 7020, Firepower 7030, Firepower 7050, Firepower 7110, Firepower 7120, Firepower 7115, Firepower... Manuel utilisateur

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Manuel

Cisco

Cisco FMC 1600 Manuel

Cisco

Cisco PIX 520 - PIX Firewall 520 Manuel utilisateur

Cisco

Cisco C170 Manuel utilisateur

Cisco

Cisco LightStream 1010 Instructions d'installation

Cisco

Cisco Firepower 4100 Series Manuel d'installation et d'exploitation

Cisco

Cisco IronPort M1070 Manuel utilisateur

Cisco

Cisco ASA 5555-X Manuel utilisateur

Cisco

Cisco Firepower 4110 Manuel utilisateur

Cisco

Cisco amp threat grid Manuel utilisateur

Cisco

Cisco ASA 5512-X Manuel utilisateur

Cisco

Cisco Small Business RV215W Manuel utilisateur

Cisco

Cisco LightStream 1010 Mode d’emploi

Cisco

Cisco PIX-515E Manuel utilisateur

Cisco

Cisco RV110W Manuel utilisateur

Cisco

Cisco 515E - PIX Restricted Bundle Manuel utilisateur

Cisco

Cisco RV110W Manuel utilisateur

Cisco

Cisco PIX 501 - Security Appliance Manuel utilisateur

Cisco

Cisco 5510 - ASA SSL / IPsec VPN Edition Manuel utilisateur

Cisco

Cisco Spam Manuel utilisateur

Cisco

Cisco Meraki MX64 Manuel utilisateur

Cisco

Cisco RV120W Manuel utilisateur

Cisco

Cisco IronPort C370 Manuel utilisateur

Manuels Pare-feu populaires d'autres marques

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur

GTA

GTA GB-200 Manuel utilisateur

Trend Micro

Trend Micro Deep Edge Manuel utilisateur