Next-Generation Firewalls
Stop threats, see what's happening on your network, and reduce costs with our threat-focused next-generation firewall appliances.
Compare us with othersLet Us Help
Advanced defenses for advanced attacks
Block more threats and quickly mitigate those that do breach your defenses with the industry’s first threat-focused NGFW. Our Cisco Firepower NGFW hardware and software options combine our proven network firewall with the industry’s most effective next-gen IPS and advanced malware protection. All so you can get more visibility, be more flexible, save more, and protect better.
-
Leading breach detection
NSS Labs -
Time to detection
2018 Annual Cybersecurity Report -
Savings from security automation
SANS Institute
Find the best next-generation firewall for you
ASA 5500-X with FirePOWER Services
- For small to medium business, branch office
- Firewall throughput from 256 to 1750 Mbps
- Threat inspection from 125 to 1250 Mbps
- Stateful firewall, Application Visibility and Control, NGIPS, Advanced Malware Protection, URL Filtering
Firepower 4100 Series
- For Internet edge, high-performance environments
- Firewall throughput from 12 to 30 Gbps
- Threat inspection from 10 to 24 Gbps
- Stateful firewall, Application Visibility and Control, NGIPS, Advanced Malware Protection, URL Filtering
Firepower 2100 Series
- For Internet edge to data center environments
- Firewall throughput from 2.0 to 8.5 Gbps
- Threat inspection from 2.0 to 8.5 Gbps
- Stateful firewall, Application Visibility and Control, NGIPS, Advanced Malware Protection, URL Filtering
Firepower 9000 Series
- For Service provider, data center
- Firewall throughput up to 225 Gbps
- Threat inspection up to 90 Gbps
- Firewall, Application Visibility and Control, NGIPS, Advanced Malware Protection, URL Filtering, DDoS
View our Firepower NGFW At-a-Glance. Not sure what you should look for in next-generation firewall hardware and software? See our 5 tips (PDF – 385 KB). Are you looking for a virtual firewall? Consider the Cisco Adaptive Security Virtual Appliance (ASAv). View our NGFW Options 3D Experience.
Global analyst reports
NSS Labs validation
Firepower NGFW blocked all evasions, besting 4 competitors by 50 or more points in effectiveness.
Market leadership
Cisco NGFWs earn a 2017 Global Network Market Leadership Award from Frost & Sullivan.
Increase protection with software subscriptions
Identify and control user access to over 4000 commercial applications, and support custom applications.
Discover, track, contain, and block the progression of network-based advanced malware, zero-day attacks, and persistent threats.
Get the visibility, automation, flexibility, and scalability you need to defeat the latest threats.
See alerts and gain control over suspect web traffic. Enforce policies on hundreds of millions of URLs in more than 80 categories.
Next-Generation Firewall Resource Center
Access everything you need to know to get started with your Next-Generation Firewalls.
Security management demo
Learn how to unify firewalls, apps, intrusion prevention, and more.
See what others have to say
"I will summarize the Cisco NGFW with one word: RELIABLE."
Chief Security Officer, Small Business Financial Services Company
"We are a small organization, so the Cisco NGFW becomes the security professional we never had – standing guard and reacting to threats."
Network Administrator, Medium-Size Enterprise Insurance Company
"The Cisco Next-Gen Firewall helped us identify and block malicious traffic, and enabled us to react to threats within hours instead of days."
Engineer, Medium-Size Enterprise Industrial Manufacturing Company
A university keeps its data center running
See more case studies"With the geo-clustered configuration, the team was able to manage hundreds of applications all in-house, and easily share security policies. I don’t think we would have been able to manage the environment with the previous setup."
Simon Warren, Senior Networking Engineer, Victoria University of Wellington, New Zealand
Introducing the Cisco Firepower 2100 Series Next-Generation Firewall
See how Cisco Firepower 2100 Series NGFWs deliver business resiliency through superior threat defense.
Related products and technologies
Cisco Umbrella
Protect against threats when users are off the VPN—without needing to deploy another agent.
Network visibility and security analytics
Cisco Stealthwatch uses NetFlow to provide visibility across the network, data center, branch offices, and cloud. Its advanced security analytics uncover stealthy attacks on the extended network.
Cisco 2018 Annual Cybersecurity Report
Read the report that adversaries don’t want you to see.
For partners
Are you a Cisco partner? Log in to see additional resources.
Looking for a solution from a Cisco partner? Connect with our security technical alliance partners.