Cisco 1700 series Manual

Cisco Secure Firewall Management Center 1700, 2700, and 4700
Hardware Installation Guide
First Published: 2023-11-27
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2023 Cisco Systems, Inc. All rights reserved.

CONTENTS
Overview 1
CHAPTER 1
Features 1
Package Contents 4
Serial Number Locations 4
Front Panel 6
Front Panel LEDs 9
Rear Panel 12
Rear Panel LEDs 13
Power Supply 14
Hardware Specifications 15
Product ID Numbers 16
Power Cord Specifications 16
Installation Preparation 25
CHAPTER 2
Installation Warnings 25
Safety Recommendations 27
Maintain Safety with Electricity 28
Prevent ESD Damage 28
Site Environment 28
Site Considerations 29
Power Supply Considerations 29
Rack Configuration Considerations 29
Rack-Mount the Chassis 31
CHAPTER 3
Unpack and Inspect the Chassis 31
Rack-Mount the Chassis 31
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
iii

Installation, Maintenance, and Upgrade 35
CHAPTER 4
Power Button Shutdown 35
Remove and Replace a Drive 36
Remove and Replace a Power Supply 38
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
iv
Contents

CHAPTER 1
Overview
•Features, on page 1
•Package Contents, on page 4
•Serial Number Locations, on page 4
•Front Panel, on page 6
•Front Panel LEDs, on page 9
•Rear Panel, on page 12
•Rear Panel LEDs, on page 13
•Power Supply, on page 14
•Hardware Specifications, on page 15
•Product ID Numbers, on page 16
•Power Cord Specifications, on page 16
Features
The Cisco Secure Management Center 1700, 2700, and 4700 management appliances run software that provides
extensive intelligence about the users, applications, devices, threats, and vulnerabilities that exist in your
network. It also uses this information to analyze your network’s vulnerabilities. It then provides tailored
recommendations on what security policies to put in place and what security events you should investigate.
The management center appliances support Cisco Secure Threat Defense software. See the Cisco Firepower
Compatibility Guide, which provides Cisco Secure software and hardware compatibility, including operating
system and hosting environment requirements, for each supported version.
The following figure shows the Secure Management Center 4700.
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
1

Figure 1: Cisco Secure Management Center 4700
The following table lists the features of the 1700, 2700, and 4700.
Table 1: 1700, 2700, and 4700 Features
470027001700Feature
1 RUForm factor
Standard 19-inch (48.3 cm) 4-post EIA rackRack mount
Front to rear
Cold aisle to hot aisle
Airflow
Displays the serial number and the MAC address for the two management ports
(eth0 and eth1)
Pullout asset card
Two threaded holes for a dual-hole grounding lug
Use is optional; the supported AC power supplies have internal grounding, so
no additional chassis grounding is required.
Grounding hole
On the front panelUnit identification button
On the rear panelPower button
One AMD 7352 24-core
2.3-GHz processor
One AMD 7282 16-core
2.8-GHz processor
One Intel 7232 8-core
31-GHz processor
Processor
128-GB RAM64-GB RAM32-GB RAMMemory
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
2
Overview
Features

470027001700Feature
Eight 16-GB
DDR4-3200-MHz
DIMMs
Four 16-GB
DDR4-3200-MHz
DIMMs
Two 16-GB
DDR4-2400-MHz
DIMMs
RDIMMs
Internal component only;
not field-replaceable
Two built-in 10-Gigabit Ethernet RJ45 OCP 3.0 NIC SFP+ ports (eth0 and eth1)
Support for 100/1000/10000 Mbps
The primary management port is eth0. You can use eth1, eth2, and eth3 as
secondary management or event ports.
Management ports
Two USB 3.0 Type AUSB ports
One 3-row 15-pin DB-15 connector
Enabled by default
VGA port
Two fixed SFP+ ports (eth2 and eth3)SFP ports
SFP-10G-SR (10 Gb)
SFP-10G-LR (10 Gb)
SFP-25G-SR-S (25 Gb)
SFP-10/25G-LR-S (25
Gb)
SFP-10/25G-CSR-S (25
Gb)
SFP-10G-SR (10 Gb)
SFP-10G-LR (10 Gb)
SFP-10G-SR (10 Gb)
SFP-10G-LR (10 Gb)
Supported SFP+1
RJ-45 serial port running RS-232 (RS-232D TIA-561)Serial console port
Two 1050-W AC power supplies
Hot-swappable and redundant as 1+1
System power
2626 BTU/hrPower consumption
Eight fans for front-to-rear cooling
Internal component only; not field-replaceable
Fans
Ten 1.2-TB 10-K SAS
SFF HDDs
RAID 6, hot-swappable
Four 600-GB 10-K SAS
SFF HDDs
RAID 5, hot-swappable
Two 1.2-TB 10-K SAS
SFF HDDs
RAID 1, hot-swappable
Storage
1
The chassis has a dedicated internal riser for a PCIe-style Cisco modular RAID
controller card.
Internal component only; not field replaceable.
RAID controller
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
3
Overview
Features

1Note Use only SFPs have been qualified for use on the management center. Although non-Cisco
SFPs and other Cisco SFPs are allowed, we do not recommend using them because they
have not been tested and validated by Cisco. Cisco TAC may refuse support for any
interoperability problems that result from using an untested SFP transceiver.
Package Contents
The following figure shows the package contents for the 1700, 2700, and 4700. Note that the contents are
subject to change and your exact contents might contain additional or fewer items.
Figure 2: Package Contents
RJ-45 to DP9-RS232 console cable (Cisco part
number 72-3383-XX)
2Chassis1
RJ-45 to RJ-45 Cat 5 Ethernet cable, yellow six
feet long (Cisco part number 72-1482-XX)
4Cisco rail kit (Cisco part number 800-43376-02)3
Two 10-Gb SFP+ transceivers with cables
supported for all models or 25-Gb SFP+
transceivers with cables supported for the 4700
Optional for all models; in package if ordered.
6Cisco Secure Management Center 1700, 2700,
and 4700
This document contains URLs that point to the
product overview, hardware installation guide,
regulatory compliance and safety information
guide, warranty, and licensing pages, and a QR
code that points to the management center
Documentation Portal.
5
Serial Number Locations
The serial number (SN) for the 1700, 2700, and 4700 is printed on the pullout asset card located on the front
panel as shown in the following figure of the 1700.
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
4
Overview
Package Contents

Figure 3: Serial Number on Pullout Asset Card
The serial number is also on the label on the cover of the chassis as shown in the following figure.
The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts
in the 1700, 2700, and 4700.
Caution
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
5
Overview
Serial Number Locations

Figure 4: Serial Number Location on Cover
Cover latch
Not supported
2Serial number label with Doc Portal QR code
Scan the QR code to go to the
Documentation Portal, which has
URLs to the product page, hardware
installation guide, the regulatory and
compliance guide, and the getting
started guide.
Note
1
Front Panel
The following figure shows the front panel features and disk-drive configuration for the 1700. See Front Panel
LEDs, on page 9 for a description of the LEDs.
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
6
Overview
Front Panel

Figure 5: 1700 Front Panel
Power button/power status LED2Drive bays
Supports two SAS HDDs in slots 1 and 2
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
Keyboard, video, and mouse (KVM) port
Not supported; use the VGA and USB keyboard
ports instead.
10Pullout asset card9
The following figure shows the front panel features and disk-drive configuration for the FMC 2600. See Front
Panel LEDs, on page 9 for a description of the LEDs.
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
7
Overview
Front Panel

Figure 6: FMC 2600 Front Panel
Power button/power status LED2Drive bays
Supports four SAS HDDs in slots 1 through 4
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
KVM port
Not supported; use the VGA and USB keyboard
ports instead.
10Pullout asset card9
The following figure shows the front panel features and disk-drive configuration for the FMC 4600. See Front
Panel LEDs, on page 9 for a description of the LEDs.
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
8
Overview
Front Panel

Figure 7: FMC 4600 Front Panel
Power button/power status LED2Drive bays
Supports ten SAS HDDs in slots 1 through 6
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
KVM port
Not supported; use the VGA and USB keyboard
ports instead.
10Pullout asset card9
Front Panel LEDs
The following figure shows the front panel LEDs and describes their states.
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
9
Overview
Front Panel LEDs

Figure 8: Front Panel LEDs and Their States
Drive activity LED:
• Off—There is no drive in the drive tray (no
access, no fault).
• Green—The drive is ready.
• Green, flashing—The drive is reading or
writing data.
2Drive fault LED:
• Off—The drive is operating properly.
• Amber—Drive fault detected.
• Amber, flashing—The drive is rebuilding.
• Amber, flashing with 1-second
interval—Drive locate function activated in
the software.
1
Unit identification LED:
• Off—The unit identification function is not
in use.
• Blue, flashing—The unit identification
function is activated.
4Power LED:
• Off—There is no AC power to the chassis.
• Amber—The chassis is in standby mode.
• Green—The chassis is in main power mode.
Power is supplied to all components.
3
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
10
Overview
Front Panel LEDs

Power supply status LED:
• Green—All power supplies are operating
normally.
• Amber—One or more power supplies are in
a degraded operational state.
• Amber, flashing—One or more power
supplies are in a critical fault state.
6System status LED:
• Green—The chassis is running in normal
operating condition.
• Green, flashing—The chassis is performing
system initialization and memory check.
• Amber—The chassis is in a degraded
operational state (minor fault).
• Power supply redundancy is lost.
• CPUs are mismatched.
• At least one CPU is faulty.
• At least one DIMM is faulty.
• At least one drive in a RAID
configuration failed.
• Amber, two flashes—There is a major fault
with the system board.
•Amber, three flashes—There is a major fault
with the DIMMs.
• Amber, four flashes—There is a major fault
with the CPUs.
5
Network link activity LED:
• Off—The Ethernet port link is idle.
• Green—One or more Ethernet ports are
link-active, but there is no activity.
•Green, flashing—One or more Ethernet ports
are link-active with activity.
8Fan status LED:
• Green—All fans are operating properly.
• Amber, flashing—One or more fans
breached the unrecoverable threshold.
7
—Temperature status LED:
• Green—The chassis is operating at normal
temperature.
• Amber—One or more temperature sensors
breached the critical threshold.
• Amber, flashing—One or more temperature
sensors breached the unrecoverable
threshold.
9
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
11
Overview
Front Panel LEDs

Rear Panel
The Cisco Integrated Management Controller (CIMC) is only supported for Lights-Out Management (LOM)
access on the CIMC port (labeled M) on a Serial Over LAN (SOL) connection to remotely monitor or manage
the management center system.
Note
The following figure shows the rear panel of the 1700, 2700, and 4700.
Figure 9: 1700, 2700, and 4700 Rear Panel
eth3 management interface
(Optional) 10-Gigabit Ethernet SFP+ support
See Features, on page 1 for the list
of qualified SFPs.
Note
2eth2 management interface
(Optional) 10-Gigabit Ethernet SFP+ support
See Features, on page 1 for the list
of qualified SFPs.
Note
1
eth0 management interface (labeled 1)
Supports 100/1000/10000 Mbps depending on
link partner capability.
See Features, on page 1 for the list
of qualified SFPs.
Note
4Threaded holes for dual-hole grounding lug3
Unit identification button6eth1 management interface (labeled 2)
Gigabit Ethernet 100/1000/10000 Mbps interface,
RJ-45, LAN2
See Features, on page 1 for the list
of qualified SFPs.
Note
5
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
12
Overview
Rear Panel

USB 3.0 Type A (USB 2)
You can connect a keyboard, and along with a
monitor on the VGA port, you can access the
console.
8USB 3.0 Type A (USB 1)
You can connect a keyboard, and along with a
monitor on the VGA port, you can access the
console.
7
Serial console port (RJ-45 connector)
Disabled by default; use the VGA port and
keyboard USB port instead.
10CIMC interface (labeled M)
CIMC is supported only for LOM
access. CIMC is not supported on
any other interfaces.
Note
9
1050-W AC power supply (PSU 1)12VGA video port (DB-15 connector)11
—141050-W AC power supply (PSU 2)13
Rear Panel LEDs
The following figure shows the rear panel LEDs and describes their states.
Figure 10: Rear Panel LEDs and Their States
100-Mbps/1-Gbps/10-Gbps Ethernet link (speed
on both LAN1 and LAN2):
• Off—Link speed is 100 Mbps.
• Amber—Link speed is 1 Gbps.
• Green—Link speed is 10 Gbps.
2Unit identification:
• Off—The unit identification function is not
in use.
• Blue, flashing—The unit identification
function is activated.
1
1-Gbps Ethernet dedicated management link:
• Off—Link speed is 10 Mbps.
• Amber—Link speed is 100 Gbps.
• Green—Link speed is 1 Gbps.
4100-Mbps/1-Gbps/10-Gbps Ethernet link status
(speed on both LAN1 and LAN2):
• Off—No link is present.
• Green—Link is active.
• Green, flashing—Traffic is present on the
active link.
3
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
13
Overview
Rear Panel LEDs

Power supply 1 (one LED for each power supply):
• Off—No AC input (12-V main power off;
12-V standby power off)
•Green, flashing—12-V main power off; 12-V
standby power on.
• Green—12-V main power on; 12-V standby
power on.
• Amber, flashing—Warning threshold
detected but 12-V main power on.
• Amber—Critical error detected; 12-V main
power off ( for example, overcurrent,
overvoltage, or overtemperature failure).
61-Gbps Ethernet dedicated management link:
• Off—No link is present.
• Amber—Link is active.
• Green, flashing—Traffic is present on the
active link.
5
—Power supply 2 (one LED for each power supply):
• Off—No AC input (12-V main power off;
12-V standby power off)
• Green, flashing—12-V main power off;
12-V standby power on.
• Green—12-V main power on; 12-V standby
power on.
• Amber, flashing—Warning threshold
detected but 12-V main power on.
• Amber—Critical error detected; 12-V main
power off ( for example, overcurrent,
overvoltage, or overtemperature failure).
7
Power Supply
The following table lists the specifications for each 1050-W AC power supply used in the 1700, 2700, and
4700.
Table 2: Power Supply Specifications
SpecificationDescription
1313 BTU/hrPower consumption
Nominal range: 100 to 240 V AC
Maximum range: 90 to 264 V AC
Input voltage range
Nominal range: 50–60 Hz
Maximum range: 47–63 Hz
Input frequency
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
14
Overview
Power Supply

SpecificationDescription
9.2 A peak at 100 V AC
5.2 A peak at 230 V AC
Maximum input current
950 VA at 100 V ACMaximum input volt amperes
1050 WMaximum output power
15 A (subcycle duration)Maximum inrush current
12 ms at 770 WMaximum hold-up time
36 WMaximum rated standby output
Climate Savers Platinum Efficiency (80 Plus Platinum
certified)
Efficiency rating
RSP2Form factor
IEC320 C13/C15Input connector
Hardware Specifications
The following table lists the hardware specifications for the 1700, 2700, and 4700.
Table 3: 1700, 2700, and 4700 Hardware Specifications
470027001700Specification
16.9 x 1.7 x 30 inches (42.9 x 4.3 x 76.2 cm)Dimensions (H x W x D)
36.0 lb (17.0 kg)34.1 lb (16.8 kg)
32.2 lb (16.6 kg)Weight
Operating: 50 to 95°F (10 to 35°C)
Maximum temperature is derated by 1°F/547 ft (1°C/300 m) of altitude above
3117 ft (950 m).
Nonoperating: –40 to 149°F (–40 to 65°C)
When the appliance is stored or transported.
Temperature
Operating: 8 to 90% noncondensing
Nonoperating: 5 to 95% noncondensing
Relative humidity
Operating: 0 to 10,000 ft
Nonoperating: 0 to 40,000 ft when the appliance is stored or transported
Altitude
5.8 Bels (measure A-weighted per ISO7779 LWAd)
Operation at 73°F (23°C)
Sound power level
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
15
Overview
Hardware Specifications

470027001700Specification
43 dBa (measure A-weighted per ISO7779 LpAM)
Operation at 73°F (23°C)
Sound pressure level
Product ID Numbers
The following table lists the field-replaceable PIDs associated with the 1700, 2700, and 4700. The spare
components are ones that you can order and replace yourself. If any internal components fail, you must get a
return material authorization (RMA) for the entire chassis including the SFPs and SFP cables. Remove the
drives and power supplies before you send the chassis for RMA. See the Cisco Returns Portal for more
information.
Table 4: 1700, 2700, and 4700 PIDs
DescriptionPID
Cisco Secure Firewall Management Center 1700FMC1700-K9
Cisco Secure Firewall Management Center 2700FMC2700-K9
Cisco Secure Firewall Management Center 4700FMC4700-K9
AC power supplyFMC-M6-PS-AC-1050W
AC power supply (spare)FMC-M6-PS-AC-1050W=
1700 and 4700 1.2-TB driveFMC-M6-HDD-1.2TB
1700 and 4700 1.2-TB drive (spare)FMC-M6-HDD-1.2TB=
2700 600-GB driveFMC-M6-HDD-600G
2700 600-GB drive (spare)FMC-M6-HDD-600G=
Rail kitUCSC-RAIL-M6
Power Cord Specifications
Each power supply has a separate power cord. Standard power cords or jumper power cords are available for
connection to the 1700, 2700, and 4700. The jumper power cords for use in racks are available as an optional
alternative to the standard power cords.
If you do not order the optional power cord with the system, you are responsible for selecting the appropriate
power cord for the product. Using a incompatible power cord with this product may result in electrical safety
hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with
the system.
Cisco Secure Firewall Management Center 1700, 2700, and 4700 Hardware Installation Guide
16
Overview
Product ID Numbers