The Wait is Over for Secure Firewall 3100 Series

0/5 No votes

Report this app


“I so stay up for the following firewall {hardware} improve cycle!”

– No One Ever

All the time Give Extra

If I discovered one factor from my firewall prospects over the various years, it will be that they wish to improve their {hardware} home equipment as a lot as a median client likes to buy a brand new automotive. No quantity of flashy vendor advertising supplies with the compulsory “industry-first” guarantees peppered throughout could make up for this unglamorous train. Nobody enjoys forking out gobs of cash and spending sleepless implementation hours each few years in alternate for a shiny new field with largely the identical structure because the previous one, save for possibly a barely sooner CPU. That stated, some {hardware} upgrades are definitely price it.

It’s been a minute since our final main {hardware} refresh, largely as a result of future-proof structure of all Safe Firewall home equipment. One thing larger and higher has been within the works for some time, however my private choice has all the time been to optimize the software program first after which purpose-build nice {hardware} for it. As an alternative of asking you to undergo the enjoyable train of forklifting {hardware} extra typically, we launched Safe Firewall Menace Protection 7.0 final 12 months to do one thing magical. It considerably elevated (and doubled in some circumstances!) each menace safety and VPN efficiency throughout all supported firewall home equipment – together with ASA5508-X from about 7 years in the past – by way of a easy software program improve. If I need to be an industry-first (if not industry-only) at one thing, delivering long-lasting buyer worth like that’s undoubtedly it.

Bundle of Energy

After delivering that software program efficiency goodness into our prospects’ fingers, it was time to observe on with a basically new {hardware} structure. One thing constructed for resilience and scale whereas sustaining simplicity. A beast that will stand as much as the prevailing traits of pervasive site visitors encryption, assume it as a efficiency baseline, and crush these numbers throughout the {industry}. Final however not least, an answer that’s extremely cost-effective in opposition to the competitors. That is how the brand new mid-range Safe Firewall 3100 Collection was born.

Related Posts  Blu android phone frp Bypass 2022 || blu smartphones google account unlock without pc

Lots of punch is packed into this industry-leading 1 rack-unit kind issue. Constructing on the years of architectural perfection, it continues to make use of an clever inside swap material for non-blocking exterior community interface connectivity in addition to versatile load-balancing and prioritization logic. It options an enterprise-grade x86-based CPU engine with our extensible Menace Protection software program that excels at a number of crucial safety and visibility capabilities. One is the proven-and-true deep packet inspection performance with Snort 3, backed by the menace intelligence and sheer brainpower of Cisco Talos. It’s complemented by inference-based software identification and malware classification with our not too long ago launched and utterly in-house developed Encrypted Visibility Engine (EVE). All of the software program elements and buyer information are hosted on self-encrypting and optionally redundant Stable-State Drives (SSD) for that additional peace of thoughts.

We’re borrowing a web page from our higher-end home equipment by incorporating the industry-first Multi-Occasion functionality which offers full useful resource separation between individually configured firewall tenants. Identical goes for the Clustering characteristic (one other industry-first again in its day!) with a completely distributed forwarding aircraft throughout as much as 8 particular person 3100 Collection home equipment that act as a single logical unit. All this goodness is properly wrapped into the brand new unified Firewall Administration Heart expertise, eliminating one complexity after one other. Then there’s the pricing that ought to undoubtedly make your funds approvers smile. And simply while you thought that we have been all out of tips, there’s only one other thing.

It’s All About Encryption

The massive deal concerning the new Safe Firewall 3100 Collection structure is the emphasis on processing encrypted site visitors. The standard {industry} strategy has been to deploy a look-aside crypto accelerator which works in tandem with the x86 CPU to course of IPsec and Transport Layer Safety (TLS) site visitors for each VPN and transit inspection functions. This strategy expectedly ends in an amazing efficiency degradation, mainly as a consequence of that look-aside nature that requires a number of traversals of the shared system bus for every encrypted or decrypted packet. Including insult to damage, most {industry} implementations additionally fail to speed up TLS session institution within the {hardware}; we had particularly addressed this downside years in the past and proudly revealed Safe Firewall menace safety throughput numbers with TLS decryption within the publicly out there information sheets – can I get one other industry-first right here?

Related Posts  Take Screenshots on an Android Phone Without Losing Your Mind

The important thing distinction with the Safe Firewall 3100 Collection home equipment is within the brand-new custom-built Discipline Programmable Gate Array (FPGA) part in between the inner swap material and the x86 CPU advanced. Not solely does it implement a next-generation (and a patented industry-first!) Move Offload engine for each lightning-fast single-flow throughput and high-performance-computing grade latency, however it additionally offers yet one more industry-first in-path crypto acceleration functionality throughout each IPsec and Datagram TLS (DTLS) VPN connections. As soon as programmed by the menace safety software program, this intermediate part can decrypt and encrypt such flows in {hardware} with out having to depend on the principle system bus or consuming valuable x86 CPU cycles. The uncooked numbers under are spectacular as a lot as their comparability to the previous-generation Safe Firewall 2100 household, however the single-tunnel throughput with a bi-directional pair of IPsec Safety Associations (SA) is mind-blowing – one thing actually industry-leading for any firewall equipment.

Cisco Secure Firewall 3100 Series Performance

Enjoyable Occasions Head

From totally distributed stateful scalability to remoted multi-tenancy to mind-blowing menace safety throughput and crypto acceleration efficiency, Safe Firewall 3100 doesn’t disappoint with quite a few (and all true!) industry-first claims. Constructing upon years of architectural perfection, it’s a menace safety package deal that’s priced proper to persuade virtually anybody to chunk the bullet and get that long-coming {hardware} improve out of the way in which. Whether or not you’re a brand new Safe Firewall buyer or a seasoned Firepower aficionado, Cisco has acquired your again with our unstoppable software program innovation for years to return – maximizing the lifetime of your earlier {hardware} funding and retaining your enterprise protected unexpectedly.

For extra info on the Safe Firewall 3100 Collection, click on right here.

We’d love to listen to what you assume. Ask a Query, Remark Under, and Keep Linked with Cisco Safe on social!

Cisco Safe Social Channels



Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.