NGFW Sizing

[a.daghestani]

Hi,

Please I need an advise to determine the right NGFW based on the below requirements:

- Each NGFW physical appliance should provide minimum of 240 Gbps Firewall throughput.

- Each NGFW physical appliance must support minimum of 850,000 new TCP connections per second.

Thank you

[Marvin Rhoads · Accepted solution]

No currently available Cisco firewall in a single physical appliance can scale to that level. That level of throughput can only be accomplished with clustering. It would require a 6-node cluster (3 each SM-56 security modules per chassis spread across two Firepower 9300 chassis).

[rohitSan]

Hi Marvin.

Is there a firewall which will scan/inspect inline traffic of 40 to 60 Gbps using some NGFW capabilities?
Which is the best suitable model for this size?

[tvotna]

https://www.cisco.com/c/en/us/products/collateral/security/firewalls/secure-firewall-4200-ds.html

[Marvin Rhoads]

@rohitSan, as @tvotna noted, the 4200 series is the best choice currently for this required throughput. Check the data sheet for other details which might indicate whether the 4215 or 4225 is the better choice.