Cisco FMC 1600 Handbuch

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware

Installation Guide

First Published: 2019-06-26

Last Modified: 2021-05-03

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Overview 1

CHAPTER 1

Features 1

Package Contents 3

Serial Number Locations 4

Front Panel 6

Front Panel LEDs 9

Rear Panel 12

Rear Panel LEDs 13

Power Supply 14

Hardware Specifications 15

Product ID Numbers 15

Power Cord Specifications 16

Installation Preparation 25

CHAPTER 2

Installation Warnings 25

Safety Recommendations 28

Maintain Safety with Electricity 28

Prevent ESD Damage 29

Site Environment 29

Power Supply Considerations 29

Rack Configuration Considerations 30

Rack-Mount the Chassis 31

CHAPTER 3

Unpack and Inspect the Chassis 31

Rack-Mount the Chassis 31

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

iii

Installation, Maintenance, and Upgrade 35

CHAPTER 4

Power Button Shutdown 35

Remove and Replace a Drive 36

Remove and Replace a Power Supply 38

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

Contents

CHAPTER 1

Overview

•Features, on page 1

•Package Contents, on page 3

•Serial Number Locations, on page 4

•Front Panel, on page 6

•Front Panel LEDs, on page 9

•Rear Panel, on page 12

•Rear Panel LEDs, on page 13

•Power Supply, on page 14

•Hardware Specifications, on page 15

•Product ID Numbers, on page 15

•Power Cord Specifications, on page 16

Features

The Cisco Firepower Management Center (FMC) 1600, 2600, and 4600 management appliances run software

that provides extensive intelligence about the users, applications, devices, threats, and vulnerabilities that exist

in your network. It also uses this information to analyze your network’s vulnerabilities. It then provides tailored

recommendations on what security policies to put in place and what security events you should investigate.

See Product ID Numbers, on page 15 for a list of the field-replaceable product IDs (PIDs) associated with

the FMC 1600, 2600, and 4600. You can remove and replace drives and power supplies. For all other internal

component failures, you must send your chassis for return material authorization (RMA).

The FMC management appliances support Cisco Firepower Threat Defense software. See the Cisco Firepower

Compatibility Guide, which provides Cisco Firepower software and hardware compatibility, including operating

system and hosting environment requirements, for each supported Firepower version.

The following table lists the features of the FMC 1600, 2600, and 4600.

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

Table 1: FMC 1600, 2600, and 4600 Features

460026001600Feature

• Common Criteria (CC) on FTD 6.4.x

• Federal Information Processing Standards (FIPS) 140-2 on FTD 6.4.x

•Department of Defense Information Network Approved Product List (DoDIN

APL)

• US Government Compliance for IPv6 (USGv6) and Ready Logo certified

on FTD 6.4.x

See the "Security Certifications Compliance" topic in the "Appliance Platform

Settings" chapter in the Firepower Management Center Configuration Guide,

Version 6.7 for the instructions on how to enable security certifications

compliance.

Security standards

certifications

1 RUForm factor

Standard 19-in. (48.3 cm) 4-post EIA rackRack mount

Front to rear

Cold aisle to hot aisle

Airflow

Displays the serial number and the MAC address for the two built-in management

ports

Pullout asset card

Two threaded holes for a dual-hole grounding lug

Use is optional; the supported AC power supplies have internal grounding, so

no additional chassis grounding is required.

Grounding hole

On the front panelUnit identification button

On the rear panelPower button

Two Intel Xeon 4116

processors

Two Intel Xeon 4110

processors

One Intel Xeon 4110

processor

Processor

128-GB RAM64-GB RAM32-GB RAMMemory

Eight 16-GB

DDR4-2400-MHz

DIMMs

Four 16-GB

DDR4-2400-MHz

DIMMs

Two 16-GB

DDR4-2400-MHz

DIMMs

RDIMMs

Internal component only;

not field-replaceable

Two built-in RJ-45 SFP+ ports

Support for 1000 Mbps, 1 Gbps, and 10 Gbps

The primary management port is eth0. You can use eth1, eth2, and eth3 as

secondary management or event ports.

Management ports

Two USB 3.0 Type AUSB ports

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

Overview

Features

460026001600Feature

One 3-row 15-pin DB-15 connector

Enabled by default

VGA port

Two fixed SFP+ portsSFP ports

SFP-10G-SR (10 Gb)

SFP-10G-LR (10 Gb)

Only these two SFPs have been qualified for use on the FMC. Although

non-Cisco SFPs and other Cisco SFPs are allowed, we do not

recommend using them because they have not been tested and validated

by Cisco. Cisco TAC may refuse support for any interoperability

problems that result from using an untested SFP transceiver.

Note

Supported SFP+

RJ-45 serial port running RS-232 (RS-232D TIA-561)Serial console port

Two 770-W AC power supplies

Hot-swappable and redundant as 1+1

System power

2626 BTU/hrPower consumption

Six fans for front-to-rear cooling

Internal component only; not field-replaceable

Fans

Ten 1.2-TB SAS HDDs

RAID 6, hot-swappable

Four 600-GB 10-K SAS

HDDs

RAID 5, hot-swappable

Two 1.2-TB 10-K SAS

HDDs

RAID 1, hot-swappable

Storage

Package Contents

The following figure shows the package contents for the FMC 1600, 2600, and 4600. Note that the contents

are subject to change and your exact contents might contain additional or fewer items.

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

Overview

Package Contents

Figure 1: Package Contents

RJ-45 to DP9-RS232 console cable (Cisco part

number 72-3383-XX)

2Chassis1

RJ-45 to RJ-45 Cat 5 Ethernet cable, yellow six

feet long (Cisco part number 72-1482-XX)

4Cisco rail kit (Cisco part number 800-43376-02)3

Two 10-Gb SFP+ transceivers with cables

Optional for all models; in package if ordered.

6Useful Links Cisco Firepower Management

Center 1600, 2600, and 4600

The steps in the Useful Links document send you

to the documentation you need to install, set up,

and configure your FMC.

Serial Number Locations

The serial number (SN) for the FMC 1600, 2600, and 4600 is printed on the pullout asset card located on the

front panel as shown in the following figure of the FMC 1600.

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

Overview

Serial Number Locations

Figure 2: Serial Number on Pullout Asset Card

The serial number is also on the label on the cover of the chassis as shown in the following figure.

The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts

in the FMC 1600, 2600, and 4600.

Caution

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

Overview

Serial Number Locations

Figure 3: Serial Number Location on Cover

Cover latch

Not supported

2Serial number label1

Front Panel

The following figure shows the front panel features and disk-drive configuration for the FMC 1600. See Front

Panel LEDs, on page 9 for a description of the LEDs.

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide

Overview

Front Panel

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Cisco Firewall Handbücher

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco PIX 501 - Security Appliance Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Handbuch

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco Small Business RV220W Bedienungsanleitung

Cisco

Cisco M690 Bedienungsanleitung

Cisco

Cisco Small Business RV220W Bedienungsanleitung

Cisco

Cisco Firepower 4100 Series Installations- und Betriebshandbuch

Cisco

Cisco ASA 5550 Series Bedienungsanleitung

Cisco

Cisco Cisco ASA Series Bedienungsanleitung

Cisco

Cisco RV120W Bedienungsanleitung

Cisco

Cisco 2100 Series Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Handbuch

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco PIX 520 - PIX Firewall 520 Bedienungsanleitung

Cisco

Cisco Firepower 4100 Series Handbuch

Cisco

Cisco Firepower 4100 Series Handbuch

Cisco

Cisco Small Business RV215W Bedienungsanleitung

Cisco

Cisco ASA 5585-X Bedienungsanleitung

Cisco

Cisco Firepower 3500 Technisches Dokument

Cisco

Cisco PIX 506E - Security Appliance Bedienungsanleitung

Cisco

Cisco RV120W Bedienungsanleitung

Cisco

Cisco S195 Handbuch

Beliebte Firewall Handbücher anderer Marken

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung

GTA

GTA GB-200 Bedienungsanleitung

Trend Micro

Trend Micro Deep Edge Bedienungsanleitung