Next-Generation Firewalls

Stop threats, see what's happening on your network, and reduce costs with our threat-focused next-generation firewall appliances.

Compare us with others

Advanced defenses for advanced attacks

Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW. Our Cisco Firepower NGFW appliances combine our proven network firewall with the industry’s most effective next-gen IPS and advanced malware protection. All so you can get more visibility, be more flexible, save more, and protect better.

  • Leading breach detection

    Leading breach detection

    Source: NSS Labs
  • Time to Detection

    Time to Detection

    Source: 2017 Midyear Cybersecurity Report
  • Savings from Security Automation

    Savings from Security Automation

    Source: SANS Institute

Find the best next-generation firewall for you

ASA 5500-X with FirePOWER Services

ASA 5500-X with FirePOWER Services

  • Small to medium business, branch office
  • Firewall throughput from 256 to 1,750 Mbps
  • Threat inspection from 125 to 1,250 Mbps
  • Stateful firewall, AVC, NGIPS, AMP, URL
Firepower 4100 Series

Firepower 4100 Series

  • Internet edge, high-performance environments
  • Firewall throughput from 20 Gbps to 60 Gbps
  • Threat inspection from 10 Gbps to 20 Gbps
  • Stateful firewall, AVC, NGIPS, AMP, URL
Firepower 2100 Series

Firepower 2100 Series

  • Internet edge to data center environments
  • Firewall throughput from 2.0 Gbps to 8.5 Gbps
  • Threat inspection from 2.0 Gbps to 8.5 Gbps
  • Stateful firewall, AVC, NGIPS, AMP, URL
Firepower 9000 Series

Firepower 9000 Series

  • Service provider, data center
  • Firewall throughput up to 225 Gbps
  • Threat inspection up to 90 Gbps
  • Firewall, AVC, NGIPS, AMP, URL, DDoS

View our Firepower NGFW at-a-glance. Not sure what you should look for in a next-generation firewall? See our 5 tips (PDF – 385 KB). Are you looking for a virtual firewall? Consider the Cisco Adaptive Security Appliance (ASAv).

NSS Labs Validation

NSS Labs Validation

Firepower NGFW blocked all evasions, besting 4 competitors by 50+ points in effectiveness.

Increase protection with software subscriptions

Application Visibility and Control

Identify and control user access to over 4000 commercial applications, plus support custom applications.

Advanced Malware Protection (AMP)

Discover, track, contain, and block the progression of network-based advanced malware, zero-day attacks, and persistent threats.

Next-Generation Intrusion Prevention System (NGIPS)

Get the visibility, automation, flexibility, and scalability you need to defeat the latest threats. 

URL Filtering

See alerts and gain control over suspect web traffic. Enforce policies on hundreds of millions of URLs in more than 80 categories. 

Next-Generation Firewall Resource Center

Next-Generation Firewall Resource Center

Access everything you need to know to get started with your Next-Generation Firewalls.

Security management live demo

Security management live demo

Learn how to unify firewalls, apps, intrusion prevention, and more.

See what others have to say

A university keeps its data center running

The Victoria University of Wellington keeps its data center running with Cisco networking products.

"With the geo-clustered configuration, the team was able to manage hundreds of applications all in-house, and easily share security policies. I don’t think we would have been able to manage the environment with the previous setup."

Simon Warren, Senior Networking Engineer, Victoria University of Wellington, New Zealand

Read the story

See more case studies

Introducing Cisco Firepower 2100 Series Next-Generation Firewall

See how Cisco Firepower 2100 Series NGFW’s deliver business resiliency through superior threat defense.

Related products and technologies

Cisco Umbrella Roaming

Cisco Umbrella Roaming

Protect against threats when users are off the VPN—without needing to deploy another agent.

IoT Threat Defense

IoT Threat Defense

How secure are your IoT devices? Defend your business with Cisco's new IoT Threat Defense.

Cisco 2017 Midyear Cybersecurity Report

Cisco 2017 Midyear Cybersecurity Report

Understand how adversaries quickly pivot, innovate, and are now shifting to the IoT. 

Get report

For partners

Are you a Cisco partner?  Log in to see additional resources.

Looking for a solution from a Cisco partner? Connect with our partner ecosystem.

View all security partner resources