Guest

Next-Generation Firewalls

Stop threats, see what's happening on your network, and reduce costs with our threat-focused next-generation firewall appliances.

Compare us with others

Advanced defenses for advanced attacks

Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW. Our Cisco Firepower NGFW appliances combine our proven network firewall with the industry’s most effective next-gen IPS and advanced malware protection. All so you can get more visibility, be more flexible, save more, and protect better.

  • Leading breach detection

    Leading breach detection

    Source: NSS Labs
  • Time to Detection

    Time to Detection

    Source: 2017 Midyear Cybersecurity Report
  • Savings from Security Automation

    Savings from Security Automation

    Source: SANS Institute

Find the best next-generation firewall for you

ASA 5500-X with FirePOWER Services

ASA 5500-X with FirePOWER Services

  • Small to medium business, branch office
  • Firewall throughput from 256 to 1,750 Mbps
  • Threat inspection from 125 to 1,250 Mbps
  • Stateful firewall, AVC, NGIPS, AMP, URL
Firepower 4100 Series

Firepower 4100 Series

  • Internet edge, high-performance environments
  • Firewall throughput from 20 Gbps to 60 Gbps
  • Threat inspection from 10 Gbps to 20 Gbps
  • Stateful firewall, AVC, NGIPS, AMP, URL
Firepower 2100 Series

Firepower 2100 Series

  • Internet edge to data center environments
  • Firewall throughput from 2.0 Gbps to 8.5 Gbps
  • Threat inspection from 2.0 Gbps to 8.5 Gbps
  • Stateful firewall, AVC, NGIPS, AMP, URL
Firepower 9000 Series

Firepower 9000 Series

  • Service provider, data center
  • Firewall throughput up to 225 Gbps
  • Threat inspection up to 90 Gbps
  • Firewall, AVC, NGIPS, AMP, URL, DDoS

View our Firepower NGFW at-a-glance. Not sure what you should look for in a next-generation firewall? See our 5 tips (PDF – 385 KB). Are you looking for a virtual firewall? Consider the Cisco Adaptive Security Appliance (ASAv).

NSS Labs Validation

NSS Labs Validation

Firepower NGFW blocked all evasions, besting 4 competitors by 50+ points in effectiveness.

Increase protection with software subscriptions

Application Visibility and Control

Identify and control user access to over 4000 commercial applications, plus support custom applications.

Advanced Malware Protection (AMP)

Discover, track, contain, and block the progression of network-based advanced malware, zero-day attacks, and persistent threats.

Next-Generation Intrusion Prevention System (NGIPS)

Get the visibility, automation, flexibility, and scalability you need to defeat the latest threats. 

URL Filtering

See alerts and gain control over suspect web traffic. Enforce policies on hundreds of millions of URLs in more than 80 categories. 

Next-Generation Firewall Resource Center

Next-Generation Firewall Resource Center

Access everything you need to know to get started with your Next-Generation Firewalls.

Introducing Cisco Firepower 2100 Series Next-Generation Firewall

See how Cisco Firepower 2100 Series NGFW’s deliver business resiliency through superior threat defense.

Related products and technologies

Cisco Umbrella Roaming

Cisco Umbrella Roaming

Protect against threats when users are off the VPN—without needing to deploy another agent.

IoT Threat Defense

IoT Threat Defense

How secure are your IoT devices? Defend your business with Cisco's new IoT Threat Defense.

Cisco 2017 Midyear Cybersecurity Report

Cisco 2017 Midyear Cybersecurity Report

Understand how adversaries quickly pivot, innovate, and are now shifting to the IoT. 

Get report

For partners

Are you a Cisco partner?  Log in to see additional resources.

Looking for a solution from a Cisco partner? Connect with our partner ecosystem.

View all security partner resources