Cisco Secure Firewall Threat Defense Virtual Data Sheet

Introduction

Cisco^® Secure Firewall Threat Defense Virtual delivers next-generation firewall capabilities purpose-built for public, private, and hybrid cloud environments. It provides robust, scalable security and simplified management without the constraints of physical hardware.

Secure Firewall Threat Defense Virtual extends Cisco Hybrid Mesh Firewall architecture to the cloud, delivering AI-powered threat inspection and uniform security policy enforcement across workloads, regardless of where they reside. It integrates seamlessly with cloud-native networking constructs to enhance application performance and ensure reliable, secure access for users and workloads alike.

Table 1.        Key capabilities of Secure Firewall Threat Defense Virtual

Flexible performance-based licensing

Cisco's virtual firewall appliance leverages a performance-based licensing model designed to deliver deployment flexibility across a wide range of infrastructure environments, including public, private, and hybrid-cloud deployments.

Each performance license tier enforces two key parameters:

●     Throughput (Rate Limit) — Controls the maximum firewall inspection throughput via an integrated rate limiter, ensuring predictable and consistent performance aligned to the selected tier.

●     Remote Access (RA) VPN Session Limit — Defines the maximum number of concurrent Remote Access VPN sessions supported under the license tier.

Table 2.        Performance License Tiers

Important: Secure Firewall Threat Defense Virtual performance tiers have no impact on the underlying compute resources (vCPUs and memory) assigned to the virtual appliance or the compute instance / shape selected in public cloud environments. The allocated compute resources drive appliance scale for capabilities such as routing table size, access control rules, and more. This decoupled approach gives customers the flexibility to independently size their virtual firewall with the compute resources needed to meet their specific requirements, while selecting the performance license tier that aligns with their throughput and VPN session needs.

Deployment and System Requirements

Secure Firewall Threat Defense Virtual is available across all major public cloud marketplaces and supports deployment on the industry’s leading hypervisor platforms:

Table 3.        Deployment Environment Summary

Table 4.        Deployment Environment (Public Cloud) Compatibility Matrix

Table 5.        Deployment Environment (Private Cloud) Compatibility Matrix

Note: For more information on each of the supported deployment environments, please reference the corresponding Getting Started Guide and the Secure Firewall Threat Defense Compatibility Guide.

Performance and Scale

Your performance may vary from the below. These should be considered general guidelines. Your actual performance will depend on the environment, including traffic type and profile, CPU type, CPU speed, cache, number of interfaces, etc. For a complete list of supported compute instances and shapes, please reference the corresponding Getting Started Guide.

Table 6.        Performance specifications for Secure Firewall Threat Defense Virtual (ESXi/KVM/OpenStack) version 10.0+ running Snort3 and SR-IOV:

Table 7.        Performance specifications for Secure Firewall Threat Defense Virtual (AWS) version 10.0+ running Snort3 and SR-IOV:

Table 8.        Performance specifications for Secure Firewall Threat Defense Virtual (Azure) version 10.0+ running Snort3 and SR-IOV:

Table 9.        Performance specifications for Secure Firewall Threat Defense Virtual (GCP) version 10.0+ running Snort3 and SR-IOV:

Table 10.     Performance specifications for Secure Firewall Threat Defense Virtual (OCI) version 10.0+ running Snort3 and SR-IOV:

Table 11.     Performance specifications for Secure Firewall Threat Defense Virtual (Alibaba) version 10.0+ running Snort3 and SR-IOV:

Ordering information

Performance tiered licensing is available starting from Firewall Threat Defense Virtual version 7.0. The new licensing model also includes Base License as a subscription. For information on licenses, subscriptions, and other options associated with the product, refer to the Network Security Ordering Guide.

Table 12.     Ordering information for Secure Firewall Threat Defense Virtual

Cisco environmental sustainability

Information about Cisco’s environmental sustainability policies and initiatives for our products, solutions, operations, and extended operations or supply chain is provided in the “Environmental Sustainability” section of Cisco’s Corporate Social Responsibility (CSR) report.

Reference links to information about key environmental sustainability topics (mentioned in the “Environment Sustainability” section of the CSR Report) are provided in the following table:

Cisco makes the packaging data available for informational purposes only. It may not reflect the most current legal developments, and Cisco does not represent, warrant, or guarantee that it is complete, accurate, or up to date. This information is subject to change without notice.