| Model |
CSF4225 -TD-K9 |
| Hardware specifications |
| Maximum number of interface |
Up to 24 x 10 Gigabit Ethernet (SFP+) interfaces |
| Up to 8 x 25 Gigabit Ethernet (SFP28) interfaces with 2 network modules |
| Up to 8 x 40 Gigabit Ethernet (QSFP+) interfaces with 2 network modules |
| Up to 24 x 1 Gigabit Ethernet ports (SFP) with 2 network modules and fixed ports |
| Up to 8 x 100 Gigabit Ethernet (QSFP28) interfaces with 2 network modules |
| Up to 4 x 400 Gigabit Ethernet (QSFPDD) interfaces with 2 network modules |
| Fixed Ports |
8 x 1/10/25 Gigabit Ethernet ports (SFP28) |
| Integrated network management ports |
2 x 1/10/25 Gigabit Ethernet ports (SFP28) |
| Storage |
1.8 TB x 2 |
| Serial port |
1 x RJ-45 console |
| USB |
1 x USB 2.0 |
| Dimensions (H x W x D) |
4.39 x 42.9 x 81.28 cm |
| Form factor (rack units) |
1RU |
| Network modules |
8 port 1Gbps copper. FTW (faito wire) Network Module |
| Ports that are not configured as FTW can be used as regular 1 Gb copper ports |
| 8 x 1/10 Gigabit Ethernet SmalForm-Factor pluggable (SFP+) network modules |
| 8 x 1/10/25 Gigabit Ethernet SmalForm-Factor pluggable (SFP28) network modules |
| 4 x 40 Gigabit Ethernet Quad SFP+ network modules |
| 4 x 40/100/200 Gigabit Ethernet Quad SFP28 (QSFP28) network modules |
| 2 x 100G Gigabit Ethernet QSFP SFP28 network modules |
| 6-port 10Gbps SR Fiber FTW (faito wire) Network Module |
| 6-port 10Gbps LR Fiber FTW (faito wire) Network Module |
| 6-port 25Gbps LR Fiber FTW (faito wire) Network Module |
| 6-port 25Gbps SR Fiber FTW (faito wire) Network Module |
| Power Supplies |
| Configuration |
Dual: 1900W for 220 AC, 1200W for 110 AC |
| AC input voltage |
100 to 120 VAC (low line) or 200 to 240 VAC (high line) |
| AC maximum input current |
14A, @ 100VAC or @ 200VAC |
| AC maximum output power |
870W |
| AC frequency |
50/60 Hz (nominal) |
| AC efficiency |
> 90% (Platinum) |
| Redundancy |
1 + 1 |
| Fans |
3 Duals fan modules (FRU). Each module has two fans |
| Noise |
Sound Pressure: <=78 dBA (typical), <=84 dBA (maximum) |
| Rack mountable |
Yes, mount rails included (4-post EIA-310-D rack) |
| Weight |
43 lbs (19.5 kgs); 2 x power supplies; 2 x NMs, 3 x fan-modules; 33 lbs (15 kgs): no power supplies, no NMs, no fans |
| Temperature: operating |
32 to 102 ℉ (0 to 40℃), at sea level |
| Temperature: non-operating |
-40 to 149℉ (-40 to 65℃) |
| Humidity: operating |
5 to 95% non-condensing |
| Humidity:non-operating |
5 to 95% non-condensing |
| Altitude: operating |
10,000 ft (max) |
| Altitude: non-operating |
40,000 ft (max) |
| Performance specifications and feature highlights with the Cisco Secure FirewalThreat Defense (TD) image |
| Throughput: FW + AVC (1024B) |
80 Gbps |
| Throughput: FW + AVC + IPS (1024B) |
80 Gbps |
| Maximum concurrent sessions, with AVC |
30 Million |
| New connections Per Second with, AVC |
600K |
| TLS (Hardware Decryption) 1 |
30 Gbps |
| Throughput: NGIPS (1024B) |
80 Gbps |
| IPSec VPN Throughput (1024B TCP w/Fastpath) |
80 Gbps |
| Instances |
15 |
| Maximum VPN Peers |
25000 |
| Centralized Management |
Centralized configuration, logging, monitoring, and reporting are performed by the FirewalManagement Center or alternatively in the cloud with Cisco Defense Orchestrator |
| Application Visibility and Contro(AVC) |
Standard, Supporting more than 4000 applications, as welas gelocation, users, and websites |
| AVC: OpenAppID Support for custom, open source application detectors |
Standard |
| Cisco Security Intelligence |
Standard with IP, URL, and DNS Threat intelligence |
| Cisco Secure IPS |
Available: can passively detect endpoints and infrastructure for threat correlation an indicators of Compromise (IOC) intelligence |
| Cisco Malware Defense |
Available: enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks, integrated threat correlation with CISCO Secure Endpoint is also optionally available |
| Cisco Secure Malware Analytics |
Available |
| URFiltering: Number of Categories |
More than 80 |
| URFiltering: Number of URcategorized |
More than 280 million |
| Automated Threat Feed and IPS signature updates |
Yes: class-ending Collective Security Intelligence (CSI) from the Cisco Talos Group |
| Third-party and open-source ecosystem |
Open API for integrations with third-party products; Snort and OpenAppID community resources for new and specific threats |
| High Availability & Clustering |
Active/active (with clustering), Active/standby. |
| Cisco Secure Firewal 4200 Series allows clustering of up 16 chassis |
| Cisco Trust Anchor Technologies |
Secure Firewal 4200 Series platforms include Trust Anchor Technologies for supply chain and software image assurance. Please see the section below for additionadetails |
Cisco Secure Firewall CSF4225-TD-K9 có phù hợp để triển khai nhiều hệ thống bảo mật trên cùng một thiết bị không?
Có. CSF4225-TD-K9 hỗ trợ 15 Security Instances, cho phép phân chia tài nguyên thành nhiều tường lửa logic độc lập. Điều này giúp doanh nghiệp hoặc nhà cung cấp dịch vụ dễ dàng triển khai đa tenant, cô lập tài nguyên và quản lý nhiều môi trường trên cùng một thiết bị.
Khả năng xử lý lưu lượng đồng thời của Cisco Secure Firewall CSF4225-TD-K9 mang lại lợi ích gì cho doanh nghiệp?
Thiết bị hỗ trợ 30 triệu phiên kết nối đồng thời và 600.000 kết nối mới mỗi giây, giúp duy trì hiệu suất ổn định trong các môi trường có lượng truy cập lớn, giảm nguy cơ nghẽn mạng và đảm bảo trải nghiệm liên tục cho người dùng.
Cisco Secure Firewall CSF4225-TD-K9 có đáp ứng tốt các hệ thống VPN quy mô lớn không?
Có. CSF4225-TD-K9 hỗ trợ thông lượng IPsec VPN lên đến 80 Gbps và tối đa 25.000 VPN Peers, phù hợp cho các doanh nghiệp đa chi nhánh hoặc nhà cung cấp dịch vụ cần kết nối VPN số lượng lớn với hiệu năng cao.