Introduction
Depending on the hardware model, the features that you can enable on a FireSIGHT System may be different. This document provides an overview of the supported features and capabilities of various hardware models of Cisco FireSIGHT System.
Note: In order to enable a feature, you need to add a feature license on a FireSIGHT Management Center (also known as Defense Center or DC), and then apply it on a managed device. You do not require to install any license locally on a managed device.
Supported Features and Capabilities of FireSIGHT Systems
| Appliance |
Model |
FireSIGHT |
Protection |
Control |
URL Filtering |
Malware |
VPN |
| Management Appliance |
DC750, DC1500, DC3500
(Series 3 Defense Center) |
DC750: 2000 Users
DC1500: 50,000 Users
DC3500: 300,000 Users
|
These Management Appliance models support
all Managed Device models with any of these features. |
|
DC1000, DC3000
(Series 2 Defense Center)
|
DC1000: 20,000 Users
DC3000: 100,000 Users
|
|
DC500
(Series 2 Defense Center)
|
DC500: 1000 Users
DC500 supports Managed Devices with FireSIGHT license, but the Geolocation functionality that comes with FireSIGHT is not supported.
|
DC500 supports Managed Devices with Protection license, but Security Intelligence feature is not supported. |
DC500 supports Managed Devices with Control license, but User Control feature is not supported. |
Not Supported |
DC500 model supports VPN feature. |
|
Virtual Defense Center
|
Virtual Defense Center model supports all Managed Device models with any of these features. |
| Managed Device |
3D7000 Series
,
3D8000 Series
(FirePOWER Device)
|
A FireSIGHT license is included with each Defense Center purchase.
All Management Appliances have the ability to perform network, host, application and user discovery using any Managed Device models.
The limitation of a FireSIGHT license is depended on the DC models. Please see the FireSIGHT section of the DC (above) for detail. |
FirePOWER Devices support all of these features. |
3D500, 3D1000, 3D2000
3D2100, 3D2500, 3D3500
3D4500, 3D6500, 3D9900
(Series 2 Device) |
A Series 2 Device running 5.2.x has the Protect capability automatically with the exception of Security Intelligence feature. |
Series 2 Devices do not support Control, URL Filter, Malware & VPN features.
|
| Virtual Device |
Virtual Device model supports Protection feature. |
Control license can be enabled on a Virtual Device, but any hardware base features, such as Routing, Switching or NAT are not available. |
Virtual Devices support URL Filtering and Malware feature. |
VPN is not supported on Virtual Device. |
Note: Legacy RNA & RUA feature licenses may be supported on DC500, DC1000 and DC3000 models. However, Cisco does not recommend exceeding the User limits that are matched to the hardware capabilities of FireSIGHT Management Centers.
Related Article(s)
Feedback