Contents

Introduction

Supported Features and Capabilities of FireSIGHT Systems

Related Article(s)

Introduction

Depending on the hardware model, the features that you can enable on a FireSIGHT System may be different. This document provides an overview of the supported features and capabilities of various hardware models of Cisco FireSIGHT System.

Note: In order to enable a feature, you need to add a feature license on a FireSIGHT Management Center (also known as Defense Center or DC), and then apply it on a managed device. You do not require to install any license locally on a managed device.

Supported Features and Capabilities of FireSIGHT Systems

Appliance

Model

FireSIGHT

Protection

Control

URL Filtering

Malware

VPN

Management Appliance

DC750, DC1500, DC3500

(Series 3 Defense Center)

DC750: 2000 Users

DC1500: 50,000 Users

DC3500: 300,000 Users

These Management Appliance models support

all Managed Device models with any of these features.

DC1000, DC3000

(Series 2 Defense Center)

DC1000: 20,000 Users

DC3000: 100,000 Users

DC500

(Series 2 Defense Center)

DC500: 1000 Users

DC500 supports Managed Devices with FireSIGHT license, but the Geolocation functionality that comes with FireSIGHT is not supported.

DC500 supports Managed Devices with Protection license, but Security Intelligence feature is not supported.

DC500 supports Managed Devices with Control license, but User Control feature is not supported.

Not Supported

DC500 model supports VPN feature.

Virtual Defense Center

Virtual Defense Center model supports all Managed Device models with any of these features.

Managed Device

3D7000 Series
,

3D8000 Series

(FirePOWER Device)

A FireSIGHT license is included with each Defense Center purchase.

All Management Appliances have the ability to perform network, host, application and user discovery using any Managed Device models.

The limitation of a FireSIGHT license is depended on the DC models. Please see the FireSIGHT section of the DC (above) for detail.

FirePOWER Devices support all of these features.

3D500, 3D1000, 3D2000

3D2100, 3D2500, 3D3500

3D4500, 3D6500, 3D9900

(Series 2 Device)

A Series 2 Device running 5.2.x has the Protect capability automatically with the exception of Security Intelligence feature.

Series 2 Devices do not support Control, URL Filter, Malware & VPN features.

Virtual Device

Virtual Device model supports Protection feature.

Control license can be enabled on a Virtual Device, but any hardware base features, such as Routing, Switching or NAT are not available.

Virtual Devices support URL Filtering and Malware feature.

VPN is not supported on Virtual Device.

Note: Legacy RNA & RUA feature licenses may be supported on DC500, DC1000 and DC3000 models. However, Cisco does not recommend exceeding the User limits that are matched to the hardware capabilities of FireSIGHT Management Centers.

Related Article(s)