Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

4321

4331

4351

4431

4451

Expand all

Features

Form factor1 RU Desktop1 RU2 RU1 RU2 RU
Integrated WAN PortsGE / SFPGE / SFP2 PoE GE / SFP2 PoE GE / SFP2 PoE GE / SFP
GEGEGE / SFP2 GE / SFP2 GE / SFP
SFP
Performance50 Mbps100 Mbps200 Mbps500 Mbps1 Gbps
Upgradable to 100 MbpsUpgradable to 300 MbpsUpgradable to 400 MbpsUpgradable to 1 GbpsUpgradable to 2 Gbps
Management port1 GE (Integrated out of Band)2 GE (Integrated out of Band)3 GE (Integrated out of Band)4 GE (Integrated out of Band)5 GE (Integrated out of Band)
Network Interface Modules (NIM)22333
Enhanced Services Modules (SM-X)N/Asingle-wide2 single- or 1 double-wideN/A2 single- or 1 double-wide
Integrated Services Card (ISC) slots1 (PVDM 4)1 (PVDM 4)1 (PVDM 4)1 (PVDM 4)1 (PVDM 4)
USB Ports (type A)11222
Default/max Flash4 GB / 8 GB4 GB / 16 GB4 GB / 16 GB8 GB / 32 GB8 GB / 32 GB
Default/max DRAM4 GB / 8 GB4 GB / 16 GB4 GB / 16 GB4 GB / 16 GB4 GB / 16 GB
Power supply typeExternal: AC, PoEExternal: AC, PoEExternal: AC, PoE or DCExternal: AC, PoE or DCExternal: AC, PoE or DC
Redundant power supplyNoNoNoYesYes
Internal RPSInternal RPS
Module online insertion and removel (OIR)YesYesYesYesYes
Server virtualization platform (UCS E-Series) and Network Compute Engine (NCE) 2-core single-wide, 2-core NCE2-core single-wide, 2-core NCE 2-core single-wide, 2-core NCE
4-core NCE4-core single-wide, 4-core NCE4-core single-wide, 4-core NCE4-core NCE4-core single-wide, 4-core NCE
4-core double-wide 4-core double-wide
6-core double-wide 6-core double-wide
8-core double-wide 8-core double-wide

Advanced Security

Zone-based firewall and NAT servicesVRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)
Hardware VPN acceleration(DES, 3DES, AES)YesYesYesYesYes
IPSEC VPN servicesFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)
Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPN
SSL VPNNoNoNoNoNo
Intrusion preventionYes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)
Anomaly Detection and Machine LearningCisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)
Network foundation protectionACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2
Cisco Umbrella Branch SupportYesYesYesYesYes
Cisco Cloud Web SecurityYesYesYesYesYes
Identity-based networkingNoNoNoNoNo
Cisco TrustSecSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPN
SGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSEC
SGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPN
SGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFW
Port/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mapping
SGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlow

Unified Communications

Local conferencingYesYesYesYesYes
Digital signal processor supportPVDM4PVDM4PVDM4PVDM4PVDM4
Cisco Unified Survivable Remote SiteUp to 50Up to 100Up to 750Up to 1200Up to 2000
Telephony supportUp to 50Up to 100Up to 750Up to 1200Up to 2000
Cisco Unified CommunicationsUp to 50Up to 100Up to 250Up to 350Up to 450
Manager Express supportUp to 50Up to 100Up to 250Up to 350Up to 450
Cisco Unity ExpressUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSE
(NM, SM, or ISM)Use Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSE
Cisco Unified Border Element (CUBE)100400100030006000
(SIP/H.323 sessions)100400100030006000
nano Cisco Unified Border Element (nanoCUBE)N/AN/AN/AN/AN/A
(sessions)N/AN/AN/AN/AN/A
Digital voice and video (T1/E1 channels)Up to 240Up to 360Up to 720Up to 720Up to 1200
Analog/BRI voiceUp to 8 ports (FXS, FXO, E/M, BRi)Up to 12 ports (FXS, FXO, E/M, BRi)Up to 20 ports (FXS, FXO, E/M, BRi)Up to 12 ports (FXS, FXO, E/M, BRi)Up to 20 ports (FXS, FXO, E/M, BRi)

Routing and Multicast

IPv4 routing protocolsRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfR
Multicast routing protocolsPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLD
IPv6 routing protocolsEIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,
BGP and PBRBGP and PBRBGP and PBRBGP and PBRBGP and PBR

Wireless LAN

Integrated 802.11 b/g/n access pointN/AN/AN/AN/AN/A
Integrated 802.11 a/b/g/n access pointN/AN/AN/AN/AN/A
Unified and autonomous modeN/AN/AN/AN/AN/A
RP-TNC connectors for field-replaceableN/AN/AN/AN/AN/A
optional high-gain antennasN/AN/AN/AN/AN/A
Diversity (dual antennas)N/AN/AN/AN/AN/A
Wireless LAN controller moduleAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-Series

Wireless WAN

3G /4G LTE cellularYesYesYesYesYes
Cat 6 LTE AdvancedYes†Yes†Yes†Yes†Yes†
GPS SupportYesYesYesYesYes
Indoor AntennaYes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)
Outdoor antennasN/AN/AN/AN/AN/A

Integrated Switching

Maximum switched Ethernet ports1640722472
Maximum switched Ethernet LAN ports with PoE1640722472
PoE support (wattage)120 W250 W500 W250 W500 W
without PoE boost (with optional power supply redundancy)
PoE support (wattage)260 W500 W950 W530 W990 W
with PoE boost (no power supply redundancy)
EtherSwitch Service Module type (width)N/Asingle2 single or 1 doubleN/A2 single or 1 double

Application Services

Intelligent Path ControlPfRPfRPfRPfRPfR
Network Contention ControlQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoS
Application VisibilityNBAR v2NBAR v2NBAR v2NBAR v2NBAR v2
WAN OptimizationISR-WAASISR-WAAS,ISR-WAAS,ISR-WAASISR-WAAS,
vWAAS on UCS E-SeriesvWAAS on UCS E-Series vWAAS on UCS E-Series
Akamai ConnectYesYesYesYesYes
Cisco Application Centric InfrastructureApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise Module