PACKETPERF

Primary Device

Cisco Secure Firewall 1140
Cisco Secure Firewall 1140
★ 3.3 Value Score

Technical Specifications

  • Firewall Throughput: 3.3 Gbps (FW+AVC, 1024B) per Cisco Firepower 1000 datasheet; some resellers list 2.2 Gbps
  • Threat Prevention Throughput: 3.3 Gbps (FW+AVC+IPS, 1024B); some resellers list 2.2 Gbps; NGIPS at 450B ~800 Mbps in one reseller listing
  • IPsec VPN Throughput: 1.2 Gbps (1024B TCP w/ FastPath); 1.4 Gbps in another Cisco table, test-dependent
  • Max Sessions: 400,000 (with AVC)
  • New Sessions/sec: 22,000 (with AVC); one reseller lists 100,000 for the ASA image, unverified
  • Interfaces: 8 x 1GbE RJ-45, 4 x 1GbE SFP, 1 x 1GbE management
  • Form Factor: 1U rack-mount
  • Max VPN Peers: 400

Curation Review

  • ✔ Pros: Compact 1U appliance with 8 copper and 4 SFP ports for small and mid-sized offices and branches; Runs either ASA or FTD software, so threat prevention is available on the FTD image; Backed by Cisco Talos threat intelligence and managed through Firepower Management Center or Firepower Device Manager; 400,000 concurrent sessions with AVC enabled is adequate for small and mid-sized sites; Widely available through resellers at a lower price than newer Cisco Secure Firewall models
  • ✘ Cons: Throughput is modest by current standards and is well below newer Cisco Secure Firewall models; Published throughput and connections-per-second figures conflict across Cisco and reseller sources, so sizing requires verification; Port set is 1GbE only, with no 10GbE or higher uplinks; Some reseller listings mark the model end-of-life, so verify support status with Cisco before purchase; Fixed hardware with no field-expandable modules limits growth
  • Est. Price: $3,983 - $8,409

Compare Against

Ubiquiti UniFi Cloud Gateway Fiber
Ubiquiti UniFi Cloud Gateway Fiber
★ 5.0 Value Score

Technical Specifications

  • Firewall Throughput: Not published by Ubiquiti; 5 Gbps IDS/IPS-secured routing throughput is the only headline figure (reviewer and retailer listings)
  • Threat Prevention Throughput: 5 Gbps IDS/IPS
  • IPsec VPN Throughput: Not published
  • Max Sessions: Not published; 500+ simultaneous users and 4,000-entry MAC address table
  • New Sessions/sec: Not published
  • Interfaces: 2x 10G SFP+; 1x 10GbE RJ45 (10G/2.5G/1G); 4x 2.5GbE RJ45 (2.5G/1G/100M/10M); 2 of the 6 WAN-capable ports are default WAN (1x 10G SFP+ and 1x 10GbE RJ45), with the other ports selectable as WAN
  • Form Factor: Compact desktop; 212.8 x 127.6 x 30 mm; 675 g without SSD
  • CPU / RAM: Quad-core ARM Cortex-A73 at 2.2 GHz / 3 GB RAM
  • Storage: Optional NVMe SSD up to 2 TB (NVR storage)
  • PoE Budget: 30W total from one PoE+ port (port 4)
  • Max Power Consumption: 29.4W excluding PoE output

Curation Review

  • ✔ Pros: Lowest-cost Ubiquiti gateway with 5 Gbps IDS/IPS, rated above the UDM-SE's 3.5 Gbps at a lower launch price ($279 MSRP vs. $499); Multi-gig flexibility with 10GBASE-T, dual SFP+ and four 2.5GbE ports; Compact desktop design with optional NVMe storage for UniFi Protect/NVR use; Supports site-to-site VPN plus OpenVPN, WireGuard and L2TP server functions, with integrated PoE+ for one device; Managed through the UniFi Network controller with 500+ simultaneous user capacity
  • ✘ Cons: No official routing, IPsec or WireGuard throughput figures published by Ubiquiti; community WireGuard numbers (around 400-500 Mbps) are unverified; Only one PoE+ output port (30W total) versus eight PoE ports on the UDM-SE; Lower device and user capacity and less storage expansion than the UDM-SE; No published IPsec tunnel or concurrent session limits; Reseller prices now often run above the launch MSRP (about $320-$346 USD at US resellers)
  • Est. Price: $279 - $346

Popular Comparisons

Cisco Secure Firewall 1140 vs Ubiquiti UniFi Cloud Gateway Fiber Cisco Secure Firewall 1140 vs Ubiquiti UniFi Dream Machine Pro Max Cisco Secure Firewall 1140 vs Ubiquiti Cloud Gateway Max Cisco Secure Firewall 1140 vs Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Cisco Secure Firewall 1140 vs Ubiquiti Enterprise Fortress Gateway (EFG)