Cisco Firepower 1010 Series Hardware Installation Guide

Features

The Cisco Firepower 1010 and 1010E are a series of compact network security appliances in the Cisco Firepower family. The Firepower 1010 is first supported in Firepower Threat Defense (FTD) Version 6.4 and ASA Version 9.12. PoE+ and L2 switch support were added beginning with FTD Version 6.5 and ASA Version 9.13. The 1010E without PoE+ is supported first in Secure Firewall Threat Defense Version 7.2.3 and Secure Firewall ASA Version 9.18.2.

See the Cisco Firepower Compatibility Guide, which provides Cisco Firepower software and hardware compatibility, including operating system and hosting environment requirements, for each supported Firepower version.

The following figure shows the Cisco Firepower 1010 and 1010E.

Figure 1. Cisco Firepower 1010 and 1010E

The following table lists the features for the Firepower 1010 and 1010E.

Table 1. Firepower 1010 and 1010E Features

Feature

1010

1010E

Form factor

Compact, or 2 RU for the rack-mount shelf

Mounting

Desktop mount

Wall mount (Cisco part number 69-100647-01)

Rack mount (Cisco part number 800-107605-01)

Airflow

Side-to-side

No fan

Note

Because the Firepower 1010 and 1010E have no fan, the internal system temperature is significantly higher than the ambient temperature cited in Hardware Specifications.

Processor

One 4-core Intel CPU

Memory

8-GB DDR4 DRAM

Boot partition

8 GB (internal)

L2 switch

Marvell SOHO 88E6390

Note

First supported in FTD Version 6.5 and ASA Version 9.13

Management port

One Gigabit Ethernet RJ-45 10/100/1000 BaseT

Restricted to network management access; connect with an RJ-45 cable

Console port

One RJ-45

Use to access management through an external system

USB Mini B port

One USB Mini B

Use to access management through an external system

USB port

One USB 3.0 Type A

Use to attach an external device such as storage

Network ports

Eight Gigabit Ethernet RJ-45 10/100/1000 BaseT

Each RJ-45 (8P8C) copper port supports auto Medium Dependent Interface Crossover (MDI/X) as well as auto-negotiation for interface speed, duplex, and other negotiated parameters, and are MDI/X-compliant.

The ports are numbered (from top to bottom, left to right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a pair of LEDs, one each for connection status and link status. The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/8.

Note

You can use ports 7 and 8 as PoE+ ports. PoE+ is first supported in FTD Version 6.5 and ASA Version 9.13.

Eight Gigabit Ethernet RJ-45 10/100/1000 BaseT

Each RJ-45 (8P8C) copper port supports auto Medium Dependent Interface Crossover (MDI/X) as well as auto-negotiation for interface speed, duplex, and other negotiated parameters, and are MDI/X-compliant.

The ports are numbered (from top to bottom, left to right) 1, 2, 3, 4, 5, 6, 7, 8. Each port includes a pair of LEDs, one each for connection status and link status. The ports are named and numbered Gigabit Ethernet 1/1 through Gigabit Ethernet 1/8.

PoE+ controller card

Note

Ports 7 and 8 are PoE+ ports; first supported in FTD Version 6.5 and ASA Version 9.13.

Not supported

Lock slot

Accepts a standard Kensington T-bar locking mechanism for securing the chassis

Reset button

A small recessed button that if pressed for longer than three seconds resets the chassis to its default state following the next reboot. Configuration variables are reset to factory default, but the flash is not erased and no files are removed.

Power switch

No

System power is controlled by the power cord; there is no power button. To shut down the Firepower 1010 or 1010E, remove the AC power supply.

Power cord socket

The chassis is powered on when you plug in the AC power supply.

AC power supply

One external AC power supply

The power supply has a total of 115 W of power. There is 55 W of +12-V system power and 60 W of -53.5-V PoE+ power.

Note

PoE+ is first supported in FTD Version 6.5 and ASA Version 9.13.

Note

Use the power supply (part number 341-100765-01) that shipped with the chassis. It supports PoE+.

One external AC power supply

The power supply has a total of 115 W of power. There is 55 W of +12-V system power.

Note

Use the power supply (part number 341-100765-01) that shipped with the chassis.

Storage

One 200-GB M.2 SATA SSD drive

The drive is used by the software; there is no user access to the drive.

The drive is not field-replaceable; you must return the chassis to Cisco for drive replacement.

Rubber feet

Four rubber feet on the bottom of the chassis

Note

The rubber feet are needed for proper cooling. Do not remove them.

Security standards certifications

Certified on ASA 9.16.x:
- Common Criteria Certification for the Network Device Collaborative Protection Profile (NDcPPv2.2E)
- Firewall Collaborative Protection Profile Module (FW_MOD_v1.4e)
- Virtual Private Network Gateway Protection Profile Module (VPNGW_MOD_v1.1)
Certified on FTD 6.4.x and FX-OS 2.6.x:
- Common Criteria Certification for the Network Device Collaborative Protection Profile (NDcPPv2.2E)
- IPS Extended Package (IPSEP v2.11)
- Firewall Collaborative Protection Profile Module (MOD_FW_v1.4e)
- Virtual Private Network Gateway Protection Profile Module (MOD_VPNGW_v1.1)
Federal Information Processing Standards (FIPS) 140-2 on FTD 6.4.x and FX-OS 2.6.x
Department of Defense Information Network Approved Product List (DoDIN APL)
US Government Compliance for IPv6 (USGv6) on FTD 7.0.x— Certification Approval under the R1 Profile for the Product Classification “NPP.”

See the "Security Certifications Compliance" topic in the "Appliance Platform Settings" chapter in your software version of the configuration guide for the instructions on how to enable security certifications compliance.

—

Console Ports

The Firepower 1010 and 1010E have two external console ports, a standard RJ-45 port and a USB Mini B serial port. Only one console port can be active at a time. When a cable is plugged into the USB console port, the RJ-45 port becomes inactive. Conversely, when the USB cable is removed from the USB port, the RJ-45 port becomes active. The console ports do not have any hardware flow control. You can use the CLI to configure the chassis through either serial console port by using a terminal server or a terminal emulation program on a computer.

RJ-45 (8P8C) port—Supports RS-232 signaling to an internal UART controller. The RJ-45 console port does not support a remote dial-in modem. You can use a standard management cable (Cisco part number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.
USB Mini B port—Lets you connect to a USB port on an external computer. For Linux and Macintosh systems, no special driver is required. For Windows systems, you must download and install a USB driver (available on software.cisco.com). You can plug and unplug the USB cable from the console port without affecting Windows HyperTerminal operations. We recommend shielded USB cables with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200 bps.

Note

For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC connected to the console port before using the USB console port.

External Flash Storage

The chassis contains a standard USB Type A port that you can use to attach an external device. The USB port can provide output power of 5 V and up to a maximum of 1A (5 USB power units).

External USB drive (optional)—You can use the external USB Type A port to attach a data-storage device. The external USB drive identifier is disk1. When the chassis is powered on, a connected USB drive is mounted as disk1 and is available for you to use. Additionally, the file-system commands that are available to disk0 are also available to disk1, including copy, format, delete, mkdir, pwd, cd, and so on.
FAT-32 File System—The Firepower 1010 only supports FAT-32-formatted file systems for the external USB drive. If you insert an external USB drive that is not in FAT-32 format, the system mounting process fails, and you receive an error message. You can enter the command format disk1: to format the partition to FAT-32 and mount the partition to disk1 again; however, data might be lost.

Package Contents

The following figure shows the package contents for the Firepower 1010 and 1010E. Note that the contents are subject to change and your exact contents might contain additional or fewer items.


1	Chassis	2	USB console cable (Type A to Mini Type B) Part number 37-1977-01 (Optional; in package if ordered)
3	Power cord See Power Cord Specifications for a list of the approved power cords.	4	Power supply
5	Cisco Secure Firepower 1010 This document has a URL and QR code that point to the Digital Documentation Portal. The portal contains links to the product information page, the hardware installation guide, the regulatory and safety information guide, the getting started guide, and the easy deployment guide.		—

QR Code Sticker

The QR code sticker on the rear panel of the chassis points to the Easy Deployment Guide for Cisco Secure Firewall 1000, 2100, and 3100 Series that explains low touch provisioning (LTP). LTP allows anyone to connect a new Firepower 1010 to a network so that the IT department can onboard the device to CDO and configure it remotely. CDO supports Firepower Threat Defense (FTD) version 6.7 and later.

The following figure shows the QR code sticker.

The following figure shows the placement of the QR code sticker on the rear panel of the chassis.

Figure 4. Firepower 1010 QR Code Sticker


1	QR code sticker		—

Serial Number and Digital Documentation Portal QR Code

The compliance label on the bottom of the chassis contains the chassis serial number, regulatory compliance marks, and the Digital Documentation Portal QR code that points to the getting started guide, the regulatory and compliance guide, the easy deployment guide, and the hardware installation guide.

The following figure shows an example compliance label found on the bottom of the chassis.

Figure 5. Compliance Label on the Chassis


1	Chassis model number	2	Chassis serial number
3	Digital Documentation Portal QR code		—

Front Panel

The following figure shows the front panel of the Firepower 1010 and 1010E. Note that there are no connectors or LEDs on the front panel.

Rear Panel

The following figure shows the rear panel of the Firepower 1010 and 1010E. See Status LEDs for a description of the LEDs.


1	Status LEDs	2	Management port
3	Lock slot	4	Power cord socket
5	Network data ports	6	Console port
7	USB Mini B port	8	USB Type A port
9	Reset button	10	Rubber feet

Status LEDs

Facing the rear of the chassis, the LEDs are located on the top left edge (facing the front of the chassis, they are in the back right corner of the top). The network port LEDs are at the top sides of each network port.

The following figure shows the status LEDs on the rear panel and on the cover of the chassis.


1	Power, Status, and Active LEDs on rear of chassis	2	Power, Status, and Active LEDs on top of chassis

The following figure shows all of the LEDs on the rear panel of the Firepower 1010 and 1010E and describes their states.

1

Power

Power supply status:

Off —Power supply off.
Green—Power supply on.

2

Status

System operating status:

Off—System has not booted up yet.
Green, flashing quickly—System is booting up.
Green—Normal system function.
Amber—Critical alarm indicating one or more of the following:
- Major failure of a hardware or software component.
- Over-temperature condition.
- Power voltage outside the tolerance range.

Green, flashing slowly (twice in 5 seconds)—Cloud connected.

Note

Cisco Defense Orchestrator (CDO) is valid for FTD 6.7 and later.

Green and amber, flashing—Cloud connection failure.
Green—Cloud disconnected.

Note

The CDO LED pattern applies to low touch provisioning (LTP). See the Easy Deployment Guide for Cisco Secure Firewall 1000, 2100, and 3100 Series for more information.

3

Active

Status of the failover pair:

Off— Failover is not operational.
Green—Failover pair operating normally. The LED is green always unless the chassis in a high availability pair.
Amber—When the chassis is in a high availability pair, the LED is amber for the standby unit.

4

Network

Status of the network ports.

Link status (L):

Off—No link, or port is not in use.
Green—Link established.
Green, flashing—Link activity.

5

Network

Status of the network ports.

Connection-speed status (S):

Green, flashing—One flash every three seconds = 10 Mbps.
Green, flashing—Two rapid flashes = 100 Mbps.
Green, flashing—Three rapid flashes = 1000 Mbps.

—

Hardware Specifications

The following table contains hardware specifications for the Firepower 1010 and 1010E.

Table 2. Firepower 1010 and 1010E Hardware Specifications

1010

1010E

Chassis dimensions (H x W x D)

1.82 x 7.85 x 8.07 inches (4.62 x 19.94 x 20.50 cm)

Rack-mount shelf dimensions (H x W x D)

3.06 x 17.40 x 19.70 inches (7.77 x 44.2 x 50.04 cm)

Chassis weight

3 lb (1.36 kg)

System power

30 W

Not including any PoE devices connected to the chassis. 55 W is the maximum power for the power supply.

Note

Use the power supply (part number 341-100765-01) that shipped with the chassis. It supports PoE+.

Note

PoE+ is first supported in FTD Version 6.5 and ASA Version 9.13.

30 W

Temperature

Operating: 32 to 104°F (0 to 40°C)

Derate the maximum operating temperature 1.5° C per 1000 ft above sea level.

Nonoperating: -13 to 158°F (-25 to 70°C) maximum altitude is 40,000 ft

Note

Because the Firepower 1010 and 1010E have no fan, the internal system temperature is significantly higher than the operating temperature.

Humidity

Operating: 90%

Nonoperating: 10 to 90%

Altitude

Operating: 0 to 9843 (3000 m)

Nonoperating: 0 to 15,000 ft (4570 m)

Acoustic noise

0 dBa

Product ID Numbers

The following table lists the field-replaceable PIDs associated with the Firepower 1010 and 1010E. The spare components are ones that you can order and replace yourself. If any internal components fail, you must get a return material authorization (RMA) for the entire chassis. See the Cisco Returns Portal for more information.

Note

See the show inventory command in the Cisco Firepower Threat Defense Command Reference or the Cisco ASA Series Command Reference to display a list of the PIDs for your Firepower 1010 and 1010E.

Table 3. Firepower 1010 and 1010E PIDs
PID	Description
FPR1010-ASA-K9	Cisco Firepower 1010 ASA desktop appliance
FPR1010E-ASA-K9	Cisco Firepower 1010E ASA desktop appliance
FPR1010-NGFW-K9	Cisco Firepower 1010 NGFW desktop appliance
FPR1010E-NGFW-K9	Cisco Firepower 1010E NGFW desktop appliance
FPR1K-DT-ACY-KIT	Cisco Firepower 1010 and 1010E accessory kit
FPR1K-DT-PWR-AC	Cisco Firepower 1010 and 1010E 115-W power supply
FPR1K-DT-PWR-AC=	Cisco Firepower 1010 and 1010E 115-W power supply (spare)
FPR1K-DT-RACK-MNT=	Cisco Firepower 1010 and 1010E rack-mount kit (spare)
FPR1K-DT-WALL-MNT=	Cisco Firepower 1010 and 1010E wall-mount kit (spare)
FPR1K-DT-FIPS-KIT=	Cisco Firepower 1010 FIPS kit (spare)

Power Cord Specifications

Each power supply has a separate power cord. Standard power cords or jumper power cords are available for connection to the security appliance. The jumper power cords for use in racks are available as an optional alternative to the standard power cords.

If you do not order the optional power cord with the system, you are responsible for selecting the appropriate power cord for the product. Using a incompatible power cord with this product may result in electrical safety hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with the system.

Note

Only the approved power cords or jumper power cords provided with the chassis are supported.

The following power cords are supported.


1	Plug: IRAM 2073	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: AUS 10S3	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: NBR 14136	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: NEMA 5-15P	2	Cord set rating: 2.5 A, 125 V
3	Connector: IEC 60320/C5		—


1	Plug: GB 2099.1	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: CEE 7 VII	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: IS 1293	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: CEI 23-06/VII	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: JIS C8303	2	Cord set rating: 3 A, 125 V
3	Connector: IEC 60320/C5		—


1	Plug: KSC 83205	2	Cord set rating: 3.0 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: SABS 164-1	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: SEV 1011	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—


1	Plug: CNS 10917-2	2	Cord set rating: 2.5 A, 125 V
3	Connector: IEC 60320/C5

Figure 23. United Kingdom (CAB-AC-C5-UK)


1	Plug: BS1363A/SS145	2	Cord set rating: 2.5 A, 250 V
3	Connector: IEC 60320/C5		—

Bias-Free Language

Book Title

Cisco Firepower 1010 Series Hardware Installation Guide

Chapter Title

Overview

Results

Chapter: Overview

Overview

Features

Package Contents

QR Code Sticker

Serial Number and Digital Documentation Portal QR Code

Front Panel

Rear Panel

Status LEDs

Hardware Specifications

Product ID Numbers

Power Cord Specifications

Was this Document Helpful?

Contact Cisco