Call a Specialist Today!855-958-0754
Free Shipping!Free Shipping!

Cisco Firepower 9300 SM-48 NGFW Appliance
Security, speed, and scalability for a powerful data center

Firepower 3000 Models
Cisco Products
Cisco Firepower 9300 Appliance
Cisco Firepower 9300 SM-48 NGFW Appliance
Get a Quote!

Click here for more options and pricing!


Cisco Firepower 9300 is a scalable (beyond 1 Tbps when clustered), carrier-grade, modular platform designed for service providers, high-performance computing centers, large data centers, campuses, high- frequency trading environments, and other point in network requiring low (less than 5-microsecond offload) latency and exceptional throughput. Firepower 9300 supports flow-offloading, programmatic orchestration, and the management of security services with RESTful APIs. It is also available in Network Equipment Building Standards (NEBS)-compliant configurations. The 9300 Series runs either the Cisco Secure Firewall ASA or Threat Defense (FTD) software.

Features and benefits

Secure networks with agility

Block intrusions using Snort 3 IPS over TLS encrypted web traffic. Thwart DDoS attacks with the integrated, enterprise-grade Radware Virtual DefensePro.

Detect threats at speed

Gain the visibility to detect and protect against known and emerging threats with Cisco's industry-leading Talos threat intelligence.

Perform at scale

Scale performance beyond 1 Tbps with clustering. Multi-instance functionality lets you create independent logical firewalls.

Prioritize and take action

Reduce the volume of events using automated risk rankings and impact flags so you can prioritize threats and respond quickly.

Turn intent into action

Unify policy across your environment and prioritize what’s important. Having security resilience is about shoring up your architecture against threats and using automation to save time.

Drive efficiency at scale

Only Secure Firewall includes license entitlement for SecureX, our open orchestration and XDR experience. The combination increases productivity across your teams and hybrid environments, while reducing threat dwell times.

Achieve superior visibility

Regain visibility and control of your encrypted traffic and application environments. See more and detect more with Cisco Talos, while leveraging billions of signals across your infrastructure with security resilience.

Make zero trust practical

Secure Firewall makes a zero-trust posture achievable and cost-effective with network, microsegmentation, and app security integrations. Automate access and anticipate what comes next.

Technical Specifications:

Firepower 3000 Models

Cisco Firepower 9300 Series Summary
Model Firewall NGFW Next-Generation Intrusion Prevention System (NGIPS) Interfaces Optional interfaces
SM-40 80G 55G 60G 8 x SFP+ on-chassis 2 x NMs: 1/10/40/100G, FTW
SM-48 80G 65G 68G 8 x SFP+ on-chassis 2 x NMs: 1/10/40/100G, FTW
SM-56 80G 68G 73G 8 x SFP+ on-chassis 2 x NMs: 1/10/40/100G, FTW
SM-56 x 3 235G 190G 190G 8 x SFP+ on-chassis 2 x NMs: 1/10/40/100G, FTW
Cisco Firepower 9300 Series Performance Specifications
Features SM-40 SM-48 SM-56 3 x SM-56
Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B) 55 Gbps 65 Gbps 70 Gbps 190 Gbps
Throughput: FW + AVC + Intrusion Prevention

System (IPS (1024B)
55 Gbps 65 Gbps 68 Gbps 190 Gbps
Maximum concurrent sessions, with AVC 35 million 35 million 35 million 60 million
Maximum new connections per second, with AVC 380K 450K 490K 1.1M
TLS (Hardware Decryption)2 10 Gbps 11 Gbps 12 Gbps 28 Gbps
Throughput: NGIPS (1024B) 60 Gbps 68 Gbps 73 Gbps 190 Gbps
IPSec VPN throughput

(1024B TCP /Fastpath)
27 Gbps 33 Gbps 36 Gbps 110 Gbps1
Maximum VPN Peers 20,000 20,000 20,000 60,000
Centralized management Centralized configuration, logging, monitoring, and reporting are performed by the Management Center or alternatively in the cloud with Cisco Defense Orchestrator
AVC Standard, supporting more than 4000 applications, as well as geolocations, users, and websites
AVC: OpenAppID support for custom, open-source application detectors Standard
Cisco Security Intelligence Standard, with IP, URL, and DNS threat intelligence
Cisco IPS License Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
Cisco Malware Defense for Networks Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available
Cisco Malware Analytics
URL filtering: number of categories More than 80
URL filtering: number of URLs categorized More than 280 million
Automated threat feed and IPS signature updates Yes: class-leading Collective Security Intelligence (CSI) from the Cisco Talos® group (
Third-party and open- source ecosystem Open API for integrations with third-party products; Snort® and OpenAppID community resources for new and specific threats
High availability and clustering Active/active and Active/standby; up to 6 modules across up to 6 different Firepower 9300 chassis.
Cisco Trust Anchor Technologies Cisco Firepower 9300 Series platforms include Trust Anchor Technologies for supply chain and software image assurance.

Note: Performance varies depending on features activated, network traffic protocol mix, and packet size. Performance is subject to change with new software releases. Consult your Cisco rep for sizing guidance.
1 In unclustered configuration.
2 Throughput measured with 50% TLS 1.2 traffic with AES256-SHA with RSA 2048B keys.

Cisco Firepower 9300 Series ASA Performance and Capabilities
Features SM-40 SM-48 SM-56 3 x SM-56
Stateful inspection firewall throughput1 80 Gbps 80 Gbps 80 Gbps 235 Gbps
Stateful inspection firewall throughput (multiprotocol)2 55 Gbps 60 Gbps 64 Gbps 172 Gbps
Concurrent firewall connections 55 million 60 million 60million 195 million
Firewall latency
(UDP 64B microseconds)
3.5 3.5 3.5 3.5
New connections per second 1.6 million 1.8 million 2 million 4.75 million
IPsec VPN throughput (450B UDP L2L test) 25 Gbps 27 Gbps 30 Gbps 74 Gbps
Maximum VPN Peers 20,000 20,000 20,000 60,000
Security contexts (included; maximum) 10; 250
High availability Active/active and active/standby
Clustering Up to 16 security modules across up to 16 different Firepower 9300 chassis
Scalability VPN load balancing, firewall clustering
Centralized management Centralized configuration, logging, monitoring, and reporting are performed by Cisco Security Manager or alternatively in the cloud with Cisco Defense Orchestrator
Adaptive Security Device Manager Web-based, local management for small-scale deployments

1 Throughput measured with 1500B User Datagram Protocol (UDP) traffic measured under ideal test conditions.
2 “Multiprotocol” refers to a traffic profile consisting primarily of TCP-based protocols and applications like HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS.

Cisco Firepower 4000 Series Hardware Specifications
Specification Description
Dimensions (H x W x D) 5.25 x 17.5 x 32 in. (13.3 x 44.5 x 81.3 cm)
Form factor 3 Rack Units (3RU), fits standard 19-in. (48.3-cm) square-hole rack
Security module slots 3
Network module slots 2 (within supervisor)
Supervisor Cisco Firepower 9000 Supervisor with 8 x 10 Gigabit Ethernet ports and 2 network module slots for I/O expansion
Security modules
  • Cisco Firepower 9000 Security Module 40 with 2 x SSDs in RAID-1 configuration
  • Cisco Firepower 9000 Security Module 48 with 2 x SSDs in RAID-1 configuration
  • Cisco Firepower 9000 Security Module 56 with 2 x SSDs in RAID-1 configuration
Network modules
(2 module slots per chassis)
  • 8 x 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) network modules
  • 4 x 40 Gigabit Ethernet Quad SFP+ network modules
  • 2 x 100 Gigabit Ethernet Quad SFP28 network modules
  • 4 x 100 Gigabit Ethernet Quad SFP28 network modules
  • 6-port 10Gbps SR Fiber FTW (fail to wire) Network Module
  • 6-port 10Gbps LR Fiber FTW (fail to wire) Network Module
  • 2-port 40Gbps SR FTW (fail to wire) Network Module
Note: Cisco Firepower 9300 may also be deployed as a dedicated threat sensor, with fail-to-wire network modules. Please contact your Cisco representative for details.
Maximum number of interfaces Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces; up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules; up to 8 x 100 Gigabit Ethernet interfaces with two network modules; up to 24 x 1 Gigabit Ethernet ports(SFP) with network modules and fixed ports
Integrated network management ports 1 x Gigabit Ethernet copper port (on supervisor)
Serial port 1 x RJ-45 console
USB 1 x USB 2.0
Storage Up to 4.8 TB per chassis (1.6 TB per security module in RAID-1 configuration)
Power supplies   AC power supply -48V DC power supply HVDC power supply
Input voltage 200 to 240V AC -40V to -60V DC* 240 to 380V DC
Maximum input current 15.5A to 12.9A 69A to 42A <14A at 200V
Maximum output power 2,500W 2,500W 2,500W
Frequency 50 to 60 Hz - -
Efficiency (at 50% load) 92% 92% 92% (at 50% load)
Redundancy 1+1    
Fans 4 hot-swappable fans
Noise 75.5 dBA at maximum fan speed
Rack mountable Yes, mount rails included (4-post EIA-310-D rack)
Weight 105 lb (47.7 kg) with one security module; 135 lb (61.2 kg) fully configured
Temperature: standard operating Up to 10,000 ft (3000 M): 32 to 104°F (0 to 40°C) for SM-40 module 32 to 104°F (0 to 40°C) for SM-48 module at sea level

Altitude adjustment notes:

For SM-56, maximum temp is 35°C, for every 1000 feet above sea level subtract 1°C
Temperature: NEBS operating Long term: 0 to 45°C, up to 6,000 ft (1829 m) Long term: 0 to 35°C, 6,000 to 13,000 ft (1829-3964 m) Short term: -5 to 55°C, up to 6,000 ft (1829 m)

Note: Firepower 9300 NEBS compliance applies only to SM-40 and SM-48 configurations.
Temperature: nonoperating -40 to 149°F (-40 to 65°C); maximum altitude is 40,000 ft
Humidity: operating 5 to 95% noncondensing
Humidity: nonoperating 5 to 95% noncondensing
Altitude: operating SM-40, SM-48: 0 to 13,000 ft (3962 m)

SM-56: 0 to 10,000 ft (3048 m); please see above Operating Temperature section for temperature adjustment notes
Altitude: nonoperating 40,000 ft (12,192 m)

* Minimum turn-on voltage is -44V DC.


Download the Cisco Firepower 9300 Series Datasheet (PDF).

Pricing Notes:

Cisco Products
Cisco Firepower 9300 Appliance
Cisco Firepower 9300 SM-48 NGFW Appliance
Get a Quote!