Cisco Firepower 1010 Series Manual

Cisco Firepower 1010 Series Hardware Installation Guide
First Published: 2019-07-24
Last Modified: 2023-06-22
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on
age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that
is hardcoded in the user interfaces of the product software, language used based on standards documentation, or language that is used by a referenced third-party product.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2019-2023 Cisco Systems, Inc. All rights reserved.

CONTENTS
Overview 1
CHAPTER 1
Features 1
Package Contents 8
QR Code Sticker 8
Serial Number and Digital Documentation Portal QR Code 9
Front Panel 10
Rear Panel 10
Status LEDs 11
Hardware Specifications 14
Product ID Numbers 15
Power Cord Specifications 16
Installation Preparation 23
CHAPTER 2
Installation Warnings 23
Position the Chassis 25
Safety Recommendations 26
Maintain Safety with Electricity 27
Prevent ESD Damage 27
Site Environment 27
Site Considerations 28
Power Supply Considerations 28
Rack Configuration Considerations 29
Mount the Chassis 31
CHAPTER 3
Unpack and Inspect the Chassis 31
Desktop-Mount the Chassis 32
Cisco Firepower 1010 Series Hardware Installation Guide
iii

Wall-Mount the Chassis 32
Rack-Mount the Chassis 35
Connect to the Console Port 41
CHAPTER 4
Connect to the Console Port with Microsoft Windows 41
Connect to the Console Port with Mac OS X 43
Connect to the Console Port with Linux 43
Installation, Maintenance, and Upgrade 45
CHAPTER 5
Install the FIPS Opacity Shield 45
Cisco Firepower 1010 Series Hardware Installation Guide
iv
Contents

CHAPTER 1
Overview
•Features, on page 1
•Package Contents, on page 8
•QR Code Sticker, on page 8
•Serial Number and Digital Documentation Portal QR Code, on page 9
•Front Panel, on page 10
•Rear Panel, on page 10
•Status LEDs, on page 11
•Hardware Specifications, on page 14
•Product ID Numbers, on page 15
•Power Cord Specifications, on page 16
Features
The Cisco Firepower 1010 and 1010E are a series of compact network security appliances in the Cisco
Firepower family. The Firepower 1010 is first supported in Firepower Threat Defense (FTD) Version 6.4 and
ASA Version 9.12. PoE+ and L2 switch support were added beginning with FTD Version 6.5 and ASA
Version 9.13. The 1010E without PoE+ is supported first in Secure Firewall Threat Defense Version 7.2.3
and Secure Firewall ASA Version 9.18.2.
See the Cisco Firepower Compatibility Guide, which provides Cisco Firepower software and hardware
compatibility, including operating system and hosting environment requirements, for each supported Firepower
version.
The following figure shows the Cisco Firepower 1010 and 1010E.
Figure 1: Cisco Firepower 1010 and 1010E
Cisco Firepower 1010 Series Hardware Installation Guide
1

The following table lists the features for the Firepower 1010 and 1010E.
Table 1: Firepower 1010 and 1010E Features
1010E1010Feature
Compact, or 2 RU for the rack-mount shelfForm factor
Desktop mount
Wall mount (Cisco part number 69-100647-01)
Rack mount (Cisco part number 800-107605-01)
Mounting
Side-to-side
No fan
Because the Firepower 1010 and 1010E have no fan, the
internal system temperature is significantly higher than
the ambient temperature cited in Hardware Specifications,
on page 14.
Note
Airflow
One 4-core Intel CPUProcessor
8-GB DDR4 DRAMMemory
8 GB (internal)Boot partition
Marvell SOHO 88E6390
First supported in FTD Version 6.5 and ASA Version 9.13
Note
L2 switch
One Gigabit Ethernet RJ-45 10/100/1000 BaseT
Restricted to network management access; connect with an RJ-45 cable
Management port
One RJ-45
Use to access management through an external system
Console port
One USB Mini B
Use to access management through an external system
USB Mini B port
One USB 3.0 Type A
Use to attach an external device such as storage
USB port
Cisco Firepower 1010 Series Hardware Installation Guide
2
Overview
Features

1010E1010Feature
Eight Gigabit Ethernet RJ-45
10/100/1000 BaseT
Each RJ-45 (8P8C) copper port
supports auto Medium Dependent
Interface Crossover (MDI/X) as
well as auto-negotiation for
interface speed, duplex, and other
negotiated parameters, and are
MDI/X-compliant.
The ports are numbered (from top
to bottom, left to right) 1, 2, 3, 4,
5, 6, 7, 8. Each port includes a pair
of LEDs, one each for connection
status and link status. The ports are
named and numbered Gigabit
Ethernet 1/1 through Gigabit
Ethernet 1/8.
Eight Gigabit Ethernet RJ-45
10/100/1000 BaseT
Each RJ-45 (8P8C) copper port
supports auto Medium Dependent
Interface Crossover (MDI/X) as
well as auto-negotiation for
interface speed, duplex, and other
negotiated parameters, and are
MDI/X-compliant.
The ports are numbered (from top
to bottom, left to right) 1, 2, 3, 4,
5, 6, 7, 8. Each port includes a pair
of LEDs, one each for connection
status and link status. The ports are
named and numbered Gigabit
Ethernet 1/1 through Gigabit
Ethernet 1/8.
You can use ports 7
and 8 as PoE+ ports.
PoE+ is first
supported in FTD
Version 6.5 and ASA
Version 9.13.
Note
Network ports
Not supportedPorts 7 and 8 are
PoE+ ports; first
supported in FTD
Version 6.5 and ASA
Version 9.13.
Note
PoE+ controller card
Accepts a standard Kensington T-bar locking mechanism for securing
the chassis
Lock slot
A small recessed button that if pressed for longer than three seconds
resets the chassis to its default state following the next reboot.
Configuration variables are reset to factory default, but the flash is not
erased and no files are removed.
Reset button
No
System power is controlled by the power cord; there is no power button.
To shut down the Firepower 1010 or 1010E, remove the AC power
supply.
Power switch
The chassis is powered on when you plug in the AC power supply.Power cord socket
Cisco Firepower 1010 Series Hardware Installation Guide
3
Overview
Features

1010E1010Feature
One external AC power supply
The power supply has a total of 115
W of power. There is 55 W of
+12-V system power.
Use the power supply
(part number
341-100765-01) that
shipped with the
chassis.
Note
One external AC power supply
The power supply has a total of 115
W of power. There is 55 W of
+12-V system power and 60 W of
-53.5-V PoE+ power.
PoE+ is first
supported in FTD
Version 6.5 and ASA
Version 9.13.
Note
Use the power supply
(part number
341-100765-01) that
shipped with the
chassis. It supports
PoE+.
Note
AC power supply
One 200-GB M.2 SATA SSD drive
The drive is used by the software; there is no user access to the drive.
The drive is not field-replaceable; you must return the chassis to Cisco
for drive replacement.
Storage
Four rubber feet on the bottom of the chassis
The rubber feet are needed for proper cooling. Do not
remove them.
Note
Rubber feet
Cisco Firepower 1010 Series Hardware Installation Guide
4
Overview
Features

1010E1010Feature
—
Security standards certifications
Cisco Firepower 1010 Series Hardware Installation Guide
5
Overview
Features

1010E1010Feature
• Certified on ASA 9.16.x:
• Common Criteria
Certification for the
Network Device
Collaborative Protection
Profile (NDcPPv2.2E)
• Firewall Collaborative
Protection Profile
Module
(FW_MOD_v1.4e)
• Virtual Private Network
Gateway Protection
Profile Module
(VPNGW_MOD_v1.1)
• Certified on FTD 6.4.xand
FX-OS 2.6.x:
• Common Criteria
Certification for the
Network Device
Collaborative Protection
Profile (NDcPPv2.2E)
• IPS Extended Package
(IPSEP v2.11)
• Firewall Collaborative
Protection Profile
Module
(MOD_FW_v1.4e)
• Virtual Private Network
Gateway Protection
Profile Module
(MOD_VPNGW_v1.1)
• Federal Information
Processing Standards (FIPS)
140-2 on FTD 6.4.xand
FX-OS 2.6.x
• Department of Defense
Information Network
Approved Product List
(DoDIN APL)
• US Government Compliance
for IPv6 (USGv6) on FTD
7.0.x— Certification Approval
Cisco Firepower 1010 Series Hardware Installation Guide
6
Overview
Features

1010E1010Feature
under the R1 Profile for the
Product Classification “NPP.”
See the "Security Certifications
Compliance" topic in the
"Appliance Platform Settings"
chapter in your software version of
the configuration guide for the
instructions on how to enable
security certifications compliance.
Console Ports
The Firepower 1010 and 1010E have two external console ports, a standard RJ-45 port and a USB Mini
B serial port. Only one console port can be active at a time. When a cable is plugged into the USB console
port, the RJ-45 port becomes inactive. Conversely, when the USB cable is removed from the USB port,
the RJ-45 port becomes active. The console ports do not have any hardware flow control. You can use
the CLI to configure the chassis through either serial console port by using a terminal server or a terminal
emulation program on a computer.
• RJ-45 (8P8C) port—Supports RS-232 signaling to an internal UART controller. The RJ-45 console
port does not support a remote dial-in modem. You can use a standard management cable (Cisco
part number 72-3383-01) to convert the RJ45-to-DB9 connection if necessary.
•USB Mini B port—Lets you connect to a USB port on an external computer. For Linux and Macintosh
systems, no special driver is required. For Windows systems, you must download and install a USB
driver (available on software.cisco.com). You can plug and unplug the USB cable from the console
port without affecting Windows HyperTerminal operations. We recommend shielded USB cables
with properly terminated shields. Baud rates for the USB console port are 1200, 2400, 4800, 9600,
19200, 38400, 57600, and 115200 bps.
For Windows operating systems, you must install a Cisco Windows USB Console Driver on any PC
connected to the console port before using the USB console port.
Note
External Flash Storage
The chassis contains a standard USB Type A port that you can use to attach an external device. The USB
port can provide output power of 5 V and up to a maximum of 1A (5 USB power units).
• External USB drive (optional)—You can use the external USB Type A port to attach a data-storage
device. The external USB drive identifier is disk1. When the chassis is powered on, a connected
USB drive is mounted as disk1 and is available for you to use. Additionally, the file-system
commands that are available to disk0 are also available to disk1, including copy,format,delete,
mkdir,pwd,cd, and so on.
• FAT-32 File System—The Firepower 1010 only supports FAT-32-formatted file systems for the
external USB drive. If you insert an external USB drive that is not in FAT-32 format, the system
mounting process fails, and you receive an error message. You can enter the command format
disk1: to format the partition to FAT-32 and mount the partition to disk1 again; however, data might
be lost.
Cisco Firepower 1010 Series Hardware Installation Guide
7
Overview
Features

Package Contents
The following figure shows the package contents for the Firepower 1010 and 1010E. Note that the contents
are subject to change and your exact contents might contain additional or fewer items.
Figure 2: Firepower 1010 and 1010E Package Contents
USB console cable (Type A to Mini Type B)
Part number 37-19770-01
2Chassis1
Power supply4Power cord
See Power Cord Specifications, on page 16 for
a list of the approved power cords.
3
—Cisco Secure Firepower 1010
This document has a URL and QR code that point
to the Digital Documentation Portal. The portal
contains links to the Product Information page,
the Hardware Installation Guide, the Regulatory
and Safety Information Guide, the Getting Started
Guide, and the Easy Deployment Guide.
5
QR Code Sticker
The QR code sticker on the rear panel of the chassis points to the Easy Deployment Guide for Cisco Secure
Firewall 1000, 2100, and 3100 Series that explains low touch provisioning (LTP). LTP allows anyone to
connect a new Firepower 1010 to a network so that the IT department can onboard the device to CDO and
configure it remotely. CDO supports Firepower Threat Defense (FTD) version 6.7 and later.
The following figure shows the QR code sticker.
Cisco Firepower 1010 Series Hardware Installation Guide
8
Overview
Package Contents

Figure 3: QR Code Sticker
The following figure shows the placement of the QR code sticker on the rear panel of the chassis.
Figure 4: Firepower 1010 QR Code Sticker
—QR code sticker1
Serial Number and Digital Documentation Portal QR Code
The compliance label on the bottom of the chassis contains the chassis serial number, regulatory compliance
marks, and the Digital Documentation Portal QR code that points to the getting started guide, the regulatory
and compliance guide, the easy deployment guide, and the hardware installation guide.
The following figure shows an example compliance label found on the bottom of the chassis.
Cisco Firepower 1010 Series Hardware Installation Guide
9
Overview
Serial Number and Digital Documentation Portal QR Code

Figure 5: Compliance Label on the Chassis
Chassis serial number2Chassis model number1
—Digital Documentation Portal QR code3
Front Panel
The following figure shows the front panel of the Firepower 1010 and 1010E. Note that there are no connectors
or LEDs on the front panel.
Figure 6: Firepower 1010 and 1010E Front Panel
Rear Panel
The following figure shows the rear panel of the Firepower 1010 and 1010E. See Status LEDs, on page 11
for a description of the LEDs.
Cisco Firepower 1010 Series Hardware Installation Guide
10
Overview
Front Panel

Figure 7: Firepower 1010 and 1010E Rear Panel
Management port2Status LEDs1
Power cord socket4Lock slot3
Console port6Network data ports5
USB Type A port8USB Mini B port7
Rubber feet10Reset button9
Status LEDs
Facing the rear of the chassis, the LEDs are located on the top left edge (facing the front of the chassis, they
are in the back right corner of the top). The network port LEDs are at the top sides of each network port.
The following figure shows the status LEDs on the rear panel and on the cover of the chassis.
Cisco Firepower 1010 Series Hardware Installation Guide
11
Overview
Status LEDs

Figure 8: Status LEDs
Power, Status, and Active LEDs on top of chassis2Power, Status, and Active LEDs on rear of chassis1
The following figure shows all of the LEDs on the rear panel of the Firepower 1010 and 1010E and describes
their states.
Figure 9: Rear Panel LEDs
Cisco Firepower 1010 Series Hardware Installation Guide
12
Overview
Status LEDs

Status
System operating status:
• Off—System has not booted up yet.
• Green, flashing quickly—System is booting
up.
• Green—Normal system function.
• Amber—Critical alarm indicating one or
more of the following:
•Major failure of a hardware or software
component.
• Over-temperature condition.
• Power voltage outside the tolerance
range.
• Green, flashing slowly (twice in 5
seconds)—Cloud connected.
Cisco Defense Orchestrator
(CDO) is valid for FTD 6.7
and later.
Note
• Green and amber, flashing—Cloud
connection failure.
• Green—Cloud disconnected.
The CDO LED pattern applies to
low touch provisioning (LTP). See
the Easy Deployment Guide for
Cisco Secure Firewall 1000, 2100,
and 3100 Series for more
information.
Note
2Power
Power supply status:
• Off —Power supply off.
• Green—Power supply on.
1
Network
Status of the network ports.
Link status (L):
• Off—No link, or port is not in use.
• Green—Link established.
• Green, flashing—Link activity.
4Active
Status of the failover pair:
• Off— Failover is not operational.
• Green—Failover pair operating normally.
The LED is green always unless the chassis
in a high availability pair.
• Amber—When the chassis is in a high
availability pair, the LED is amber for the
standby unit.
3
Cisco Firepower 1010 Series Hardware Installation Guide
13
Overview
Status LEDs

—Network
Status of the network ports.
Connection-speed status (S):
• Green, flashing—One flash every three
seconds = 10 Mbps.
• Green, flashing—Two rapid flashes = 100
Mbps.
•Green, flashing—Three rapid flashes = 1000
Mbps.
5
Hardware Specifications
The following table contains hardware specifications for the Firepower 1010 and 1010E.
Table 2: Firepower 1010 and 1010E Hardware Specifications
1010E1010
1.82 x 7.85 x 8.07 inches (4.62 x 19.94 x 20.50 cm)Chassis dimensions (H x W x D)
3.06 x 17.40 x 19.70 inches (7.77 x 44.2 x 50.04 cm)Rack-mount shelf dimensions (H x
W x D)
3 lb (1.36 kg)Chassis weight
30 W
30 W
Not including any PoE devices
connected to the chassis. 55 W is
the maximum power for the power
supply.
Use the power supply
(part number
341-100765-01) that
shipped with the
chassis. It supports
PoE+.
Note
PoE+ is first
supported in FTD
Version 6.5 and ASA
Version 9.13.
Note
System power
Cisco Firepower 1010 Series Hardware Installation Guide
14
Overview
Hardware Specifications

1010E1010
Operating: 32 to 104°F (0 to 40°C)
Derate the maximum operating temperature 1.5° C per 1000 ft above
sea level.
Nonoperating: -13 to 158°F (-25 to 70°C) maximum altitude is 40,000
ft
Because the Firepower 1010 and 1010E have no fan, the
internal system temperature is significantly higher than
the operating temperature.
Note
Temperature
Operating: 90%
Nonoperating: 10 to 90%
Humidity
Operating: 0 to 9843 (3000 m)
Nonoperating: 0 to 15,000 ft (4570 m)
Altitude
0 dBaAcoustic noise
Product ID Numbers
The following table lists the field-replaceable PIDs associated with the Firepower 1010 and 1010E. The spare
components are ones that you can order and replace yourself. If any internal components fail, you must get a
return material authorization (RMA) for the entire chassis. See the Cisco Returns Portal for more information.
See the show inventory command in the Cisco Firepower Threat Defense Command Reference or the Cisco
ASA Series Command Reference to display a list of the PIDs for your Firepower 1010 and 1010E.
Note
Table 3: Firepower 1010 and 1010E PIDs
DescriptionPID
Cisco Firepower 1010 ASA desktop applianceFPR1010-ASA-K9
Cisco Firepower 1010E ASA desktop applianceFPR1010E-ASA-K9
Cisco Firepower 1010 NGFW desktop applianceFPR1010-NGFW-K9
Cisco Firepower 1010E NGFW desktop applianceFPR1010E-NGFW-K9
Cisco Firepower 1010 and 1010E accessory kitFPR1K-DT-ACY-KIT
Cisco Firepower 1010 and 1010E 150-W power
supply
FPR1K-DT-PWR-AC
Cisco Firepower 1010 Series Hardware Installation Guide
15
Overview
Product ID Numbers

DescriptionPID
Cisco Firepower 1010 and 1010E 150-W power
supply (spare)
FPR1K-DT-PWR-AC=
Cisco Firepower 1010 and 1010E rack-mount kit
(spare)
FPR1K-DT-RACK-MNT=
Cisco Firepower 1010 and 1010E wall-mount kit
(spare)
FPR1K-DT-WALL-MNT=
Cisco Firepower 1010 FIPS kit (spare)FPR1K-DT-FIPS-KIT=
Power Cord Specifications
Each power supply has a separate power cord. Standard power cords or jumper power cords are available for
connection to the security appliance. The jumper power cords for use in racks are available as an optional
alternative to the standard power cords.
If you do not order the optional power cord with the system, you are responsible for selecting the appropriate
power cord for the product. Using a incompatible power cord with this product may result in electrical safety
hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with
the system.
Only the approved power cords or jumper power cords provided with the chassis are supported.
Note
The following power cords are supported.
Figure 10: Argentina (CAB-AC-C5-ARG)
Cord set rating: 2.5 A, 250 V2Plug: IRAM 20731
—Connector: IEC 60320/C53
Cisco Firepower 1010 Series Hardware Installation Guide
16
Overview
Power Cord Specifications