Compare Models

4221

4321

4331

4351

4431

4451

Expand all

Advanced Security

Zone-based firewall and NAT servicesVRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)VRF-Aware Firewall and Network Address Translation (NAT)
Hardware VPN acceleration(DES, 3DES, AES)YesYesYesYesYesYes
IPSEC VPN servicesFlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)FlexVPN, Easy VPN remote server, Enhanced Easy VPN, Dynamic Multipoint VPN (DMVPN)
 Group Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPNGroup Encrypted Transport VPN (GET VPN), V3PN, MPLS VPN
SSL VPNNoNoNoNoNoNo
Intrusion preventionYes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)Yes (Snort for Singnature Based and FirePower as nGIPS)
Anomaly Detection and Machine LearningCisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)Cisco Self Learning Networks (SLN)
Network foundation protectionACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2ACL, FPM, control plan protection, control plane policing (CoPP), QoS, role-based CLI access, source-based RTBH, uRPF, SSHv2
Cisco Umbrella Branch SupportYesYesYesYesYesYes
Cisco Cloud Web SecurityYesYesYesYesYesYes
Identity-based networkingNoNoNoNoNoNo
Cisco TrustSecSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPNSecurity Group Tag Exchange Protocol (SXP), SGT over GETVPN
 SGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSECSGT over IPSEC
 SGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPNSGT over DMVPN
 SGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFWSGT-based ZBFW
 Port/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mappingPort/Layer 3 interface/IP/subnet-to-SGT mapping
 SGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlowSGT export in Flexible NetFlow

Unified Communications

Local conferencingN/AYesYesYesYesYes
Digital signal processor supportN/APVDM4PVDM4PVDM4PVDM4PVDM4
Cisco Unified Survivable Remote SiteN/AUp to 50Up to 100Up to 750Up to 1200Up to 2000
Telephony supportN/AUp to 50Up to 100Up to 750Up to 1200Up to 2000
Cisco Unified CommunicationsN/AUp to 50Up to 100Up to 250Up to 350Up to 450
Manager Express supportN/AUp to 50Up to 100Up to 250Up to 350Up to 450
Cisco Unity ExpressN/AUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSE
(NM, SM, or ISM)N/AUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSEUse Cisco Unity Connection on UCSE
Cisco Unified Border Element (CUBE)N/A100400100030006000
(SIP/H.323 sessions)N/A100400100030006000
nano Cisco Unified Border Element (nanoCUBE)N/AN/AN/AN/AN/AN/A
(sessions)N/AN/AN/AN/AN/AN/A
Digital voice and video (T1/E1 channels)N/AUp to 240Up to 360Up to 720Up to 720Up to 1200
Analog/BRI voiceN/AUp to 8 ports (FXS, FXO, E/M, BRi)Up to 12 ports (FXS, FXO, E/M, BRi)Up to 20 ports (FXS, FXO, E/M, BRi)Up to 12 ports (FXS, FXO, E/M, BRi)Up to 20 ports (FXS, FXO, E/M, BRi)

Routing and Multicast

IPv4 routing protocolsRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfRRIP v1/v2, EIGRP, OSPF, BGP, PBR, PfR
Multicast routing protocolsPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLDPIM-SM, mroute (static route), and MLD
IPv6 routing protocolsEIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,EIGRP, RIP, OSPFv3, IS-IS,
 BGP and PBRBGP and PBRBGP and PBRBGP and PBRBGP and PBRBGP and PBR

Wireless LAN

Integrated 802.11 b/g/n access pointN/AN/AN/AN/AN/AN/A
Integrated 802.11 a/b/g/n access pointN/AN/AN/AN/AN/AN/A
Unified and autonomous modeN/AN/AN/AN/AN/AN/A
RP-TNC connectors for field-replaceableN/AN/AN/AN/AN/AN/A
optional high-gain antennasN/AN/AN/AN/AN/AN/A
Diversity (dual antennas)N/AN/AN/AN/AN/AN/A
Wireless LAN controller moduleN/AAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-SeriesAvailable on UCS E-Series

Wireless WAN

3G /4G LTE cellularYesYesYesYesYesYes
Cat 6 LTE AdvancedYes†Yes†Yes†Yes†Yes†Yes†
GPS SupportYesYesYesYesYesYes
Indoor AntennaYes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)Yes (Various antenna using 2 x TNC connectors supporting MIMO)
Outdoor antennasN/AN/AN/AN/AN/AN/A

Integrated Switching

Maximum switched Ethernet ports2 x 81640722472
Maximum switched Ethernet LAN ports with PoE01640722472
PoE support (wattage)N/A120 W250 W500 W250 W500 W
without PoE boost (with optional power supply redundancy)
PoE support (wattage)N/A260 W500 W950 W530 W990 W
with PoE boost (no power supply redundancy)
EtherSwitch Service Module type (width)N/AN/Asingle2 single or 1 doubleN/A2 single or 1 double

Application Services

Intelligent Path ControlPfRPfRPfRPfRPfRPfR
Network Contention ControlQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoSQoS, HQoS
Application VisibilityNBAR v2NBAR v2NBAR v2NBAR v2NBAR v2NBAR v2
WAN OptimizationN/AISR-WAASISR-WAAS,ISR-WAAS,ISR-WAASISR-WAAS,
vWAAS on UCS E-SeriesvWAAS on UCS E-Series vWAAS on UCS E-Series
Akamai ConnectN/AYesYesYesYesYes
Cisco Application Centric InfrastructureApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise ModuleApplication Policy Infrastructure Controller (APIC) with Enterprise Module

† With CAT6 LTE Advanced theoretical DL speed of 300 Mbps, with 2 NIM slots ISR4221 and ISR4321, customer may need the performance license to maximize CAT6 LTE Advanced theoretical full potential capability with 2 NIM CAT6 LTE Advanced slots depending on specific carrier SP provisioning capability & capacity.

Supporting Business Continuity Amid COVID-19 Challenges

At Cisco, we're working to do our part by providing solutions, technology, tips and resources to help our communities during this challenging time.