Cisco 7010 - Page 14

1-6
Firepower 7000 and 8000 Series Installation Guide
Chapter 1 Introduction to the Firepower System
Firepower System Appliances
Table 1-2 Supported Capabilities by Firepower Management Center Model
Feature or Capability Management Center
Management Center
Virtual
collect discovery data (host, application, and user) reported by managed
devices and build a network map for your organization
yes yes
view geolocation data for your network traffic yes yes
manage an intrusion detection and prevention (IPS) deployment yes yes
manage devices performing Security Intelligence filtering yes yes
manage devices performing simple network-based control, including
geolocation-based filtering
yes yes
manage devices performing application control yes yes
manage devices performing user control yes yes
manage devices that filter network traffic by literal URL yes yes
manage devices performing URL Filtering by category and reputation yes yes
manage devices performing simple file control by file type yes yes
manage devices performing network-based advanced malware protection
(AMP)
yes yes
receive endpoint-based malware (FireAMP) events from your FireAMP
deployment
yes yes
manage device-based hardware-based features:
• fast-path rules
• strict TCP enforcement
• configurable bypass interfaces
• tap mode
• switching and routing
• NAT policies
• VPN
yes yes
manage device-based redundancy and resource sharing:
• device stacks
• device high availability
• stacks in high-availability pairs
yes yes
separate and manage internal and external traffic using traffic channels yes yes
isolate and manage traffic on different networks using multiple management
interfaces
yes yes
install a malware storage pack yes no
connect to an eStreamer, host input, or database client yes yes