Cisco (CSF220-TD-K9) Secure 220 Network Security/Firewall Appliance

Cisco Systems, Inc

CSF220-TD-K9

http://www.cisco.com/c/en_au

Cisco

Secure

200

220

Secure 220 Network Security/Firewall Appliance

The Cisco® Secure Firewall 200 Series offers next-generation firewall capabilities specifically designed for distributed enterprises and small branch locations. It provides robust, costeffective security and simplified management within a compact form factor, ensuring secure and optimized connectivity at the network edge. The 200 Series extends Cisco's Hybrid Mesh Firewall architecture to branch edges, providing AI-powered inspection and consistent security policies. It integrates SD-WAN capabilities for enhanced application performance and reliable user access. Additionally, the 200 Series delivers application and user control, efficient segmentation, and advanced security features tailored for cost-sensitive environments. Cisco Secure Firewall 220 is the first model in the 200 series.

Highlights | Robust connectivity

• Achieve up to 1.5 Gbps throughput from a fanless desktop firewall when next-generation firewall capabilities are enabled. Enable the highavailability feature for continuous uptime.
• Connect branch offices to the hybrid mesh firewall architecture using the 1G Small Form-factor Pluggable (SFP) port. Network and cryptographic operations are accelerated inline by leveraging the System on a Chip (SoC).

Simplified management

• Manage hundreds of firewalls across various global branch locations using a single unified manager, available in both on-premises and cloud-delivered platforms.
• Rapidly deploy firewalls across multiple branches using pre-provisioning templates. Utilize Cisco AI Assistant to streamline rule creation and reporting.

Superior visibility

• Leverage the AI-powered Encrypted Visibility Engine (EVE) to gain insights into and control over encrypted traffic, including Transport Layer Security (TLS) 1.3, thereby eliminating the need to decrypt traffic.
• Protect networks against zero-day vulnerabilities with SnortML-a machine learning-based exploit detection technology integrated into the industryleading Snort 3 Intrusion Prevention System (IPS).

Seamless integration

• Achieve comprehensive, end-to-end protection through native integration with Cisco Umbrella®, Cisco Secure Access, and Cisco Endpoint Security.
• Optimize application performance and user experience through seamlessly integrated SDWAN capabilities, accelerated by Zero-Touch Provisioning (ZTP).

Network Security/Firewall Appliance

Intrusion Prevention

• TLS Decryption
• Threat Protection
• Endpoint Protection
• Zero Day Event
• Intrusion Prevention
• Network Protection
• Application Control
• Stateful Inspection Firewall
• Secure IPsec VPN Connectivity

2 Gbit/s

• AES (256-bit)
• SHA
• RSA 2048-bit
• TLS
• TLS 1.3
• TLS 1.2

50

• HTTP
• FTP
• SMTP
• TCP/UDP

Wired

6000

30000

Yes

Security

4

Yes

4

230.40 MB/s

192 MB/s

Gigabit Ethernet

1000Base-T

1

SFP (mini-GBIC)

1

Yes

• 50 Hz
• 60 Hz

19 W

30 W

• Compact
• Desktop
• Rack-mountable
• Wall Mountable

29.2 mm

233.7 mm

198.1 mm

1.18 kg

• Security
• Network
• Branch Office