Next-Generation Firewalls
Stop threats, see what's happening on your network, and reduce costs with our threat-focused next-generation firewall appliances.
Stop threats, see what's happening on your network, and reduce costs with our threat-focused next-generation firewall appliances.
Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW. Our Cisco Firepower NGFW appliances combine our proven network firewall with the industry’s most effective next-gen IPS and advanced malware protection. All so you can get more visibility, be more flexible, save more, and protect better.

Leading breach detection
Source: NSS Labs
Time to Detection
Source: 2016 Midyear Cybersecurity Report
Savings from Security Automation
Source: SANS Institute
Small business, branch office, enterprise
Firewall throughput from 256 Mbps to 15 Gbps
Threat inspection from 125 Mbps to 30 Gbps
Stateful firewall, AVC, NGIPS, AMP, URL

Internet edge, high-performance environments
Firewall throughput from 20 Gbps to 60 Gbps
Threat inspection from 10 Gbps to 20 Gbps
Stateful firewall, AVC, NGIPS, AMP, URL

Service provider, data center
Firewall throughput up to 225 Gbps
Threat inspection up to 90 Gbps
Firewall, AVC, NGIPS, AMP, URL, DDoS
View our Firepower NGFW at-a-glance. Not sure what you should look for in a next-generation firewall? See our 5 tips (PDF – 385 KB). Are you looking for a virtual firewall? Consider the Cisco Adaptive Security Appliance (ASAv).

Identify and control user access to over 4000 commercial applications, plus support custom applications.

Discover, track, contain, and block the progression of network-based advanced malware, zero-day attacks, and persistent threats.

Get the visibility, automation, flexibility, and scalability you need to defeat the latest threats.

See alerts and gain control over suspect web traffic. Enforce policies on hundreds of millions of URLs in more than 80 categories.

See more case studies"We're implementing the Cisco next generation firewall solution because it includes in one package the ability to do intrusion prevention, advanced malware protection, URL filtering and application visibility and control all together in a single consolidated appliance."
Aaron Alton, Manager of IT Infrastructure

Protect against threats when users are off the VPN—without needing to deploy another agent.

Effective security policy management made simple

Are you a Cisco partner? Log in to see additional resources.
Looking for a solution from a Cisco partner? Connect with our partner ecosystem.