PACKETPERF

Primary Device

Cisco Secure Firewall 1140
Cisco Secure Firewall 1140
★ 3.3 Value Score

Technical Specifications

  • Firewall Throughput: 3.3 Gbps (FW+AVC, 1024B) per Cisco Firepower 1000 datasheet; some resellers list 2.2 Gbps
  • Threat Prevention Throughput: 3.3 Gbps (FW+AVC+IPS, 1024B); some resellers list 2.2 Gbps; NGIPS at 450B ~800 Mbps in one reseller listing
  • IPsec VPN Throughput: 1.2 Gbps (1024B TCP w/ FastPath); 1.4 Gbps in another Cisco table, test-dependent
  • Max Sessions: 400,000 (with AVC)
  • New Sessions/sec: 22,000 (with AVC); one reseller lists 100,000 for the ASA image, unverified
  • Interfaces: 8 x 1GbE RJ-45, 4 x 1GbE SFP, 1 x 1GbE management
  • Form Factor: 1U rack-mount
  • Max VPN Peers: 400

Curation Review

  • ✔ Pros: Compact 1U appliance with 8 copper and 4 SFP ports for small and mid-sized offices and branches; Runs either ASA or FTD software, so threat prevention is available on the FTD image; Backed by Cisco Talos threat intelligence and managed through Firepower Management Center or Firepower Device Manager; 400,000 concurrent sessions with AVC enabled is adequate for small and mid-sized sites; Widely available through resellers at a lower price than newer Cisco Secure Firewall models
  • ✘ Cons: Throughput is modest by current standards and is well below newer Cisco Secure Firewall models; Published throughput and connections-per-second figures conflict across Cisco and reseller sources, so sizing requires verification; Port set is 1GbE only, with no 10GbE or higher uplinks; Some reseller listings mark the model end-of-life, so verify support status with Cisco before purchase; Fixed hardware with no field-expandable modules limits growth
  • Est. Price: $3,983 - $8,409

Compare Against

Ubiquiti UniFi Dream Machine Pro Max
Ubiquiti UniFi Dream Machine Pro Max
★ 5.0 Value Score

Technical Specifications

  • Firewall Throughput: Not published by Ubiquiti. Third-party tests: about 3.8-4.7 Gbps internet (WAN) throughput; about 3.0 Gbps inter-VLAN routing
  • Threat Prevention Throughput: 5 Gbps IDS/IPS (Ubiquiti spec)
  • IPsec VPN Throughput: Not published by Ubiquiti. Unverified third-party estimate of about 1.8-2.2 Gbps
  • Max Sessions: Not published
  • New Sessions/sec: Not published
  • Interfaces: 2x 10G SFP+ ports; 8x 1GbE RJ45 LAN ports; 1x 2.5GbE RJ45 WAN port (sources conflict on WAN; one lists a 25GbE WAN port)
  • Form Factor: 1U rackmount

Curation Review

  • ✔ Pros: 5 Gbps IDS/IPS rating from Ubiquiti; 10G SFP+ ports for fast uplinks or LAN; Multi-WAN support with 2.5GbE WAN; Integrated UniFi Network controller and UniFi OS for centralized management; Built-in NVR bay for UniFi Protect cameras; Rackmount 1U form factor suited to server racks
  • ✘ Cons: Ubiquiti does not publish firewall, VPN, or session-rate figures; Real-world WAN throughput in independent tests is about 3-4.7 Gbps, below the 5 Gbps IDS/IPS rating; Port layout and WAN specs differ between sources; Costs about 2x the UDM Pro (about $220 more) for a modest throughput gain; Limited 1GbE LAN port count compared with dedicated switches; Requires UniFi ecosystem for full feature set
  • Est. Price: $599 - $660

Popular Comparisons

Cisco Secure Firewall 1140 vs Ubiquiti UniFi Cloud Gateway Fiber Cisco Secure Firewall 1140 vs Ubiquiti UniFi Dream Machine Pro Max Cisco Secure Firewall 1140 vs Ubiquiti Cloud Gateway Max Cisco Secure Firewall 1140 vs Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Cisco Secure Firewall 1140 vs Ubiquiti Enterprise Fortress Gateway (EFG)