Cisco Firepower 9300 User Manual

Cisco Preparative Procedures & Operational User Guide
© 2016 Cisco Systems, Inc. All rights reserved.
in the peer’s certificate chain
message
message
Any certificate revoked in the
peer’s certificate chain
Connection fails with syslog
message
Connection fails with syslog
message
One CDP is missing in the peer’s
certificate chain
Connection fails with syslog
message
Peer certificate: connection
fails with syslog message
Intermediate CAs: connection
succeeds
One CDP CRL is empty in the
peer’s certificate chain with valid
signature
Connection fails with syslog
message
Connection succeeds
Any CDP in the peer’s certificate
chain cannot be downloaded
Connection fails with syslog
message
Peer certificate: Connection
fails with syslog message
Intermediate CAs: connection
succeeds
Certificate has CDP, but the CDP
server is down
Connection fails with syslog
message
Peer certificate: Connection
fails with syslog message
Intermediate CAs: connection
succeeds
Certificate has CDP, server is up,
and CRL is on CDP, but the CRL
has an invalid signature
Connection fails with syslog
message
Peer certificate: Connection
fails with syslog message
Intermediate CAs: connection
succeeds
Table 4 Certificate Revocation Check Mode set to Strict with a local static CRL
With local static CRL
LDAP Connection
IPSec Connection
Checking peer certificate chain
Full certificate chain is required
Full certificate chain is required
Checking CDP in peer certificate
chain
Full certificate chain is required
Full certificate chain is required
CDP checking for Root CA
certificate of the peer certificate
chain
Yes
Not applicable
Any certificate validation failure
in the peer certificate chain
Connection fails with syslog
message
Connection fails with syslog
message
Any certificate revoked in the
peer certificate chain
Connection fails with syslog
message
Connection fails with syslog
message
One CDP is missing the peer
certificate chain
Connection succeeds
Connection succeeds

Cisco Firepower 9300 Specifications

General

Chassis	Modular
Security Modules	Up to 3
Firewall Throughput	Up to 1.2 Tbps
Management	Cisco Firepower Management Center
Form Factor	Rack-mountable
Number of Slots	3
Encryption Throughput	Up to 100 Gbps
Operating Temperature	32 to 104°F (0 to 40°C)
Humidity	10% to 90% non-condensing
Altitude	Up to 10, 000 ft
Power Supply	Dual, hot-swappable
Product Type	Security Appliance
Supported Modules	Security, network, and interface modules
Redundancy	Yes