Cisco Firepower 1600 Manual

Cisco Firepower Management Center 1600, 2600, and 4600 Hardware
Installation Guide
First Published: 2019-06-26
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
©2019 Cisco Systems, Inc. All rights reserved.

CONTENTS
Overview 1
CHAPTER 1
Features 1
Package Contents 3
Serial Number Locations 4
Front Panel 5
Front Panel LEDs 7
Rear Panel 10
Rear Panel LEDs 11
Power Supply 12
Hardware Specifications 13
Product ID Numbers 14
Power Cord Specifications 14
Installation Preparation 23
CHAPTER 2
Installation Warnings 23
Safety Recommendations 25
Maintain Safety with Electricity 25
Prevent ESD Damage 26
Site Environment 26
Power Supply Considerations 26
Rack Configuration Considerations 27
Mount and Connect 29
CHAPTER 3
Unpack and Inspect the Chassis 29
Rack-Mount the Chassis 29
Connect Cables, Turn on Power, and Verify Connectivity 32
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
iii

Maintenance and Upgrade 35
CHAPTER 4
Power Button Shutdown 35
Remove and Replace a Drive 36
Remove and Replace a Power Supply 38
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
iv
Contents

CHAPTER 1
Overview
•Features, on page 1
•Package Contents, on page 3
•Serial Number Locations, on page 4
•Front Panel, on page 5
•Front Panel LEDs, on page 7
•Rear Panel, on page 10
•Rear Panel LEDs, on page 11
•Power Supply, on page 12
•Hardware Specifications, on page 13
•Product ID Numbers, on page 14
•Power Cord Specifications, on page 14
Features
The Cisco Firepower Management Center (FMC) 1600, 2600, and 4600 management appliances run software
that provides extensive intelligence about the users, applications, devices, threats, and vulnerabilities that exist
in your network. It also uses this information to analyze your network’s vulnerabilities. It then provides tailored
recommendations on what security policies to put in place and what security events you should investigate.
See Product ID Numbers, on page 14 for a list of the field-replaceable product IDs (PIDs) associated with
the FMC 1600, 2600, and 4600. You can remove and replace drives and power supplies. For all other internal
component failures, you must send your chassis for RMA.
The FMC management appliances support Cisco Firepower Threat Defense software. See the Cisco Firepower
Compatibility Guide, which provides Cisco Firepower software and hardware compatibility, including operating
system and hosting environment requirements, for each supported Firepower version.
The FMC 1600, 2600, and 4600 are certified for Federal Information Processing Standards (FIPS) 140-2
beginning in Cisco Firepower version 6.4.1. See the "Security Certifications Compliance" topic in the
"Appliance Platform Settings" chapter in the Firepower Management Center Configuration Guide for the
instructions on how to enable security certifications compliance.
Note
The following table lists the features of the FMC 1600, 2600, and 4600.
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
1

Table 1: FMC 1600, 2600, and 4600 Features
460026001600Feature
1 RUForm factor
Yes
Standard 19-in. (48.3 cm) 4-post EIA rack
Rack mount
Front to rear
Cold aisle to hot aisle
Airflow
Displays the serial number and the MAC address for the two built-in management
ports.
Pullout asset card
32 GB (for vMedia)
Internal component only; not field-replaceable
Flex flash card
Yes
Two threaded holes for dual-hole grounding lug
Use is optional; the supported AC power supplies have internal grounding, so
no additional chassis grounding is required.
Grounding hole
YesLocator beacon
YesPower switch
Two Intel Xeon 4116
processors
Two Intel Xeon 4110
processors
One Intel Xeon 4110
processor
Processor
128-GB RAM64-GB RAM32-GB RAMMemory
Eight 16-GB
DDR4-2400-MHz
DIMMs
Four 16-GB
DDR4-2400-MHz
DIMMs
Two 16-GB
DDR4-2400-MHz
DIMMs
RDIMMs
Internal component only;
not field-replaceable
Two built-in RJ-45 SFP+ ports
Support for 1000 Mbps, 1 Gbps, and 10 Gbps
The primary management port is eth0. You can use eth1, eth2, and eth3 as
secondary management or event ports.
Management ports
Two
USB 3.0 Type A
USB ports
One 3-row 15-pin DB-15 connector
Enabled by default
VGA port
Two fixed SFP+ portsSFP ports
SFP-10G-SR (10 GB)Supported SFP+
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
2
Overview
Features

460026001600Feature
One
RJ-45 serial port running RS-232 (RS-232D TIA-561)
Serial console port
Two 770-W AC power supplies
Hot-swappable and redundant as 1+1
System power
2626 BTU/hrPower consumption
Six fans for front-to-rear cooling
Internal component only; not field-replaceable
Fans
Ten 1.2-TB SAS SSDs
RAID 6, hot-swappable
Four 600-GB 10-K SAS
HDDs
RAID 5, hot-swappable
Two 1.2-TB 10-K SAS
HDDs
RAID 1, hot-swappable
Storage
One
The chassis has a dedicated internal riser for a PCIe-style Cisco modular RAID
controller card.
Internal component only; not field-replaceable
RAID controller
Package Contents
The following figure shows the package contents for the FMC 1600, 2600, and 4600. Note that the contents
are subject to change and your exact contents might contain additional or fewer items.
Figure 1: Package Contents
RJ-45 to DP9-RS232 console cable (Cisco
part number 72-3383-XX)
2Chassis1
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
3
Overview
Package Contents

RJ-45 to RJ-45 Cat 5 Ethernet cable,
yellow six feet long (Cisco part number
72-1482-XX)
4Cisco rail kit (Cisco part number
800-43376-02)
3
Two 10-Gb SFP transceivers with cables
Optional; in package if ordered.
6
Useful Links Cisco Firepower Management
Center 1600, 2600, and 4600
The steps in the Useful Links document
send you to the documentation you need
to install, set up, and configure your FMC.
5
Serial Number Locations
The serial number (SN) for the FMC 1600, 2600, and 4600 is printed on the pullout asset card located on the
front panel as shown in the following figure of the FMC 1600.
Figure 2: Serial Number on Pullout Asset Card
The serial number is also on the label on the cover of the chassis as shown in the following figure.
The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts
in the FMC 1600, 2600, and 4600.
Caution
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
4
Overview
Serial Number Locations

Figure 3: Serial Number Location on Cover
Cover latch
Not supported
2Serial number label1
Front Panel
The following figure shows the front panel features and disk-drive configuration for the FMC 1600. See Front
Panel LEDs, on page 7 for a description of the LEDs.
Figure 4: FMC 1600 Front Panel
Power button/power status LED2Drive bays
Supports two SAS HDDs in slots 1 and
2
1
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
5
Overview
Front Panel

System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
Keyboard, video, and mouse (KVM)
port
Not supported; use the VGA and USB
keyboard ports instead.
10Pullout asset card9
The following figure shows the front panel features and disk-drive configuration for the FMC 2600. See Front
Panel LEDs, on page 7 for a description of the LEDs.
Figure 5: FMC 2600 Front Panel
Power button/power status LED2Drive bays
Supports four SAS HDDs in slots 1
through 4
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
KVM port
Not supported; use the VGA and USB
keyboard ports instead.
10Pullout asset card9
The following figure shows the front panel features and disk-drive configuration for the FMC 4600. See Front
Panel LEDs, on page 7 for a description of the LEDs.
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
6
Overview
Front Panel

Figure 6: FMC 4600 Front Panel
Power button/power status LED2Drive bays
Supports ten SAS SSDs in slots 1
through 6
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
KVM port
Not supported; use the VGA and USB
keyboard ports instead.
10Pullout asset card9
Front Panel LEDs
The following figure shows the front panel LEDs and describes their states.
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
7
Overview
Front Panel LEDs

Figure 7: Front Panel LEDs and Their States
Drive activity LED:
• Off—There is no drive in the
drive tray (no access, no fault).
• Green—The drive is ready.
• Green, flashing—The drive is
reading or writing data.
2Drive fault LED:
• Off—The drive is operating
properly.
• Amber—Drive fault detected.
• Amber, flashing—The drive is
rebuilding.
• Amber, flashing with 1-second
interval—Drive locate function
activated in the software.
1
Unit identification LED:
• Off—The unit identification
function is not in use.
• Blue, flashing—The unit
identification function is
activated.
4Power LED:
• Off—There is no AC power to
the chassis.
•Amber—The chassis is in standby
mode.
• Green—The chassis is in main
power mode. Power is supplied
to all components.
3
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
8
Overview
Front Panel LEDs

Power supply status LED:
• Green—All power supplies are
operating normally.
• Amber—One or more power
supplies are in a degraded
operational state.
• Amber, flashing—One or more
power supplies are in a critical
fault state.
6System status LED:
• Green—The chassis is running in
normal operating condition.
• Green, flashing—The chassis is
performing system initialization
and memory check.
• Amber—The chassis is in a
degraded operational state (minor
fault).
• Power supply redundancy is
lost.
• CPUs are mismatched.
• At least one CPU is faulty.
•At least one DIMM is faulty.
• At least one drive in a RAID
configuration failed.
• Amber, two flashes—There is a
major fault with the system board.
• Amber, three flashes—There is a
major fault with the DIMMs.
• Amber, four flashes—There is a
major fault with the CPUs.
5
Network link activity LED:
• Off—The Ethernet port link is
idle.
• Green—One or more Ethernet
ports are link-active, but there is
no activity.
• Green, flashing—One or more
Ethernet ports are link-active with
activity.
8Fan status LED:
• Green—All fans are operating
properly.
• Amber, flashing—One or more
fans breached the unrecoverable
threshold.
7
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
9
Overview
Front Panel LEDs

Temperature status LED:
• Green—The chassis is operating
at normal temperature.
• Amber—One or more
temperature sensors breached the
critical threshold.
• Amber, flashing—One or more
temperature sensors breached the
unrecoverable threshold.
9
Rear Panel
Although the Cisco Integrated Management Controller (CIMC) is not supported on the FMC, you can use
Lights-Out-Management (LOM) on the default management interface (eth0) on a Serial Over LAN (SOL)
connection to remotely monitor or manage the FMC system. For information about using LOM and SOL, see
the Cisco Firepower Management Center Getting Started Guide for Models 1600, 2600, and 4600 for more
information.
Note
The following figure shows the rear panel of the FMC 1600, 2600, and 4600.
Figure 8: Rear Panel
USB 3.0 Type A (USB 2)
You can connect a keyboard, and along
with a monitor on the VGA port, you
can access the console.
2USB 3.0 Type A (USB 1)
You can connect a keyboard, and along
with a monitor on the VGA port, you
can access the console.
1
eth1 management interface (labeled 2)
Gigabit Ethernet 100/1000/10000
Mbps interface, RJ-45, LAN2
4eth0 management interface (labeled 1)
Supports 100/1000/10000 Mbps
depending on link partner capability.
3
CIMC interface (labeled M)
Not supported
6VGA video port (DB-15 connector)5
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
10
Overview
Rear Panel

Unit identification button8Serial console port (RJ-45 connector)
Disabled by default; use the VGA port
and keyboard USB port instead. See
the "Set up Serial Access" topic in the
Cisco Firepower Management Center
Getting Started Guide for Models
1600, 2600, and 4600.
7
770-W AC power supply (PSU 2)10770-W AC power supply (PSU 1)9
eth2 management interface
10-Gigabit Ethernet SFP+ support
Use only Cisco-supported SFP+
transceivers.
12Threaded holes for dual-hole
grounding lug
11
Riser handle
Not in use
14eth3 management interface
10-Gigabit Ethernet SFP+ support
Use only Cisco-supported SFP+
transceivers.
13
Rear Panel LEDs
The following figure shows the rear panel LEDs and describes their states.
Figure 9: Rear Panel LEDs and Their States
100-Mbps/1-Gbps/10-Gbps Ethernet
link status (speed on both LAN1 and
LAN2):
• Off—No link is present.
• Green—Link is active.
• Green, flashing—Traffic is
present on the active link.
2100-Mbps/1-Gbps/10-Gbps Ethernet
link (speed on both LAN1 and LAN2):
• Off—Link speed is 100 Mbps.
• Amber—Link speed is 1 Gbps.
• Green—Link speed is 10 Gbps.
1
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
11
Overview
Rear Panel LEDs

1-Gbps Ethernet dedicated
management link:
• Off—No link is present.
• Amber—Link is active.
• Green, flashing—Traffic is
present on the active link.
41-Gbps Ethernet dedicated
management link:
• Off—Link speed is 10 Mbps.
•Amber—Link speed is 100 Gbps.
• Green—Link speed is 1 Gbps.
3
Power supply (one LED for each
power supply):
• Off—No AC input (12-V main
power off; 12-V standby power
off)
• Green, flashing—12-V main
power off; 12-V standby power
on.
• Green—12-V main power on;
12-V standby power on.
• Amber, flashing—Warning
threshold detected but 12-V main
power on.
• Amber—Critical error detected;
12-V main power off ( for
example, overcurrent,
overvoltage, or overtemperature
failure).
6Rear unit identification:
• Off—The unit identification
function is not in use.
• Blue, flashing—The unit
identification function is
activated.
5
Power Supply
The following table lists the specifications for each 770-W AC power supply used in the FMC 1600, 2600,
and 4600.
Table 2: Power Supply Specifications
SpecificationDescription
1313 BTU/hrPower consumption
Nominal range: 100 to 120 V AC, 200 to 240 V AC
Range: 90–132 V AC, 180–264 V AC
AC input voltage range
Nominal range: 50–60 Hz
Range: 47–63 Hz
AC input frequency
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
12
Overview
Power Supply

SpecificationDescription
9.5 A peak at 100-V AC
4.5 A peak at 208 V AC
Maximum AC input current
950 VA at 100 V ACMaximum input volt amperes
770 WMaximum output power for each power supply
15 A (subcycle duration)Maximum inrush current
12 ms at 770 WMaximum hold-up time
12 V DCPower supply output voltage
12 V DCPower supply standby voltage
Climate Savers Platinum Efficiency (80 Plus Platinum
certified)
Efficiency rating
RSP2Form factor
IEC320 C13/C15Input connector
Hardware Specifications
The following table lists the hardware specifications for the FMC 1600, 2600, and 4600.
Table 3: FMC 1600, 2600, and 4600 Hardware Specifications
460026001600Specification
1.7 x 16.89 x 29.8 in. (4.32 x 43.0 x 75.6 cm)Dimensions (H x W x D)
36.0 lb (17.0 kg)34.1 lb (16.8 kg)
32.2 lb (16.6 kg)Maximum weight (fully
loaded chassis)
Operating: 50 to 95°F (10 to 35°C)
Maximum temperature is derated by 1°F/547 ft (1°C/300 m) of altitude above
3117 ft (950 m).
Nonoperating: –40 to 149°F (–40 to 65°C)
When the appliance is stored or transported.
Temperature
Operating: 8 to 90% noncondensing
Nonoperating: 5 to 95% noncondensing
Relative humidity
Operating: 0 to 10,000 ft
Nonoperating: 0 to 40,000 ft when the appliance is stored or transported
Altitude
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
13
Overview
Hardware Specifications

460026001600Specification
5.8 Bels (measure A-weighted per ISO7779 LWAd)
Operation at 73°F (23°C)
Sound power level
43 dBa (measure A-weighted per ISO7779 LpAM)
Operation at 73°F (23°C)
Sound pressure level
Product ID Numbers
The following table lists the field-replaceable PIDs associated with the FMC 1600, 2600, and 4600. The spare
components are ones that you can order and replace yourself. If any internal components fail, you must RMA
the entire chassis including the SFPs and SFP cables. Remove the drives and power supplies before you send
the chassis for RMA.
Table 4: FMC 1600, 2600, and 4600 PIDs
DescriptionPID
AC power supplyFMC-M5-PS-AC-770W
AC power supply (spare)FMC-M5-PS-AC-770W=
FMC 1600 and 4600 1.2-TB hard disk driveFMC-M5-HDD-1.2TB
FMC 1600 and 4600 1.2-TB hard disk drive (spare)FMC-M5-HDD-1.2TB=
FMC 2600 600-GB hard disk driveFMC-M5-HDD-600G
FMC 2600 600-GB hard disk drive (spare)FMC-M5-HDD-600G=
Rail kitUCSC-RAILB-M4
Power Cord Specifications
Each power supply has a separate power cord. Standard power cords or jumper power cords are available for
connection to the FMC 1600, 2600, and 4600. The jumper power cords for use in racks are available as an
optional alternative to the standard power cords.
If you do not order the optional power cord with the system, you are responsible for selecting the appropriate
power cord for the product. Using a incompatible power cord with this product may result in electrical safety
hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with
the system.
Only the approved power cords and jumper cords provided with the FMC 1600, 2600, and 4600 are supported.
Note
The following power cords and jumper cords are supported.
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
14
Overview
Product ID Numbers

Figure 10: Argentina CAB-250V-10A-AR
Cord set rating: 10 A, 250 V2Plug: IRAM 20731
Connector: IEC 60320/C133
Figure 11: Australia CAB-9K10A-AU
Cord set rating: 10 A, 250 V2Plug: A.S. 3112-20001
Connector: IEC 60320/C153
Figure 12: Brazil PWR-250V-10A-BZ
Cord set rating: 10 A, 250 V2Plug: NBR 141361
Connector: IEC 60320/C133
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
15
Overview
Power Cord Specifications

Figure 13: Cabinet Jumper CAB-C13-C14-2M
Cord set rating: 10A, 250V2Plug: SS10A1
Connector: HS10S, C-13 to C-143
Figure 14: Cabinet Jumper CAB-C13-C14-AC
Cord set rating: 10 A, 250 V2Plug: SS10A1
Connector: HS10S, C-13 to C-14 (recessed
receptacle)
3
Figure 15: Cabinet Jumper CAB-C13-CBN
Cord set rating: 10 A, 250 V2Plug: SS10A1
Connector: HS10S, C-13 to C-143
Cisco Firepower Management Center 1600, 2600, and 4600 Hardware Installation Guide
16
Overview
Power Cord Specifications