Next-Generation Firewalls

Stop threats, see what's happening on your network, and reduce costs with our threat-focused next-generation firewall appliances.

Compare us with others

Advanced defenses for advanced attacks

Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW. Our Cisco Firepower NGFW appliances combine our proven network firewall with the industry’s most effective next-gen IPS and advanced malware protection. All so you can get more visibility, be more flexible, save more, and protect better.

  • data-graphics-100

    Leading breach detection

    Source: NSS Labs
  • infographic2-156x135

    Time to Detection

    Source: 2016 Midyear Cybersecurity Report
  • infographic3-156x135

    Savings from Security Automation

    Source: SANS Institute

Find the best next-generation firewall for you


ASA 5500-X with FirePOWER Services

  • Small business, branch office, enterprise
  • Firewall throughput from 256 Mbps to 15 Gbps
  • Threat inspection from 125 Mbps to 30 Gbps
  • Stateful firewall, AVC, NGIPS, AMP, URL

Firepower 4100 Series

  • Internet edge, high-performance environments
  • Firewall throughput from 20 Gbps to 60 Gbps
  • Threat inspection from 10 Gbps to 20 Gbps
  • Stateful firewall, AVC, NGIPS, AMP, URL

Firepower 2100 Series

  • Internet edge to data center environments
  • Firewall throughput from 1.9 Gbps to 8.5 Gbps
  • Threat inspection from 1.9 Gbps to 8.5 Gbps
  • Stateful firewall, AVC, NGIPS, AMP, URL

Firepower 9000 Series

  • Service provider, data center
  • Firewall throughput up to 225 Gbps
  • Threat inspection up to 90 Gbps
  • Firewall, AVC, NGIPS, AMP, URL, DDoS

View our Firepower NGFW at-a-glance. Not sure what you should look for in a next-generation firewall? See our 5 tips (PDF – 385 KB). Are you looking for a virtual firewall? Consider the Cisco Adaptive Security Appliance (ASAv).

Increase protection with software subscriptions


Identify and control user access to over 4000 commercial applications, plus support custom applications.


Discover, track, contain, and block the progression of network-based advanced malware, zero-day attacks, and persistent threats.


Get the visibility, automation, flexibility, and scalability you need to defeat the latest threats. 


See alerts and gain control over suspect web traffic. Enforce policies on hundreds of millions of URLs in more than 80 categories. 

Cisco 2017 Annual Cybersecurity Report

Introducing Cisco Firepower 2100 Series Next-Generation Firewall

See how Cisco Firepower 2100 Series NGFW’s deliver business resiliency through superior threat defense.

Related products


Protect against threats when users are off the VPN—without needing to deploy another agent. 


Effective cloud-based security policy management made simple.

Next-Generation Firewall Resource Center

Next-Generation Firewall Resource Center

Access everything you need to know to get started with your Next-Generation Firewalls.

For partners

Are you a Cisco partner?  Log in to see additional resources.

Looking for a solution from a Cisco partner? Connect with our partner ecosystem.