PACKETPERF

Primary Device

Cisco Secure Firewall 3130
Cisco Secure Firewall 3130
★ 3.2 Value Score

Technical Specifications

  • Firewall Throughput: 38 Gbps (Firewall + AVC, 1024-byte packets)
  • Threat Prevention Throughput: 38 Gbps (Firewall + AVC + IPS, 1024-byte packets); threat/malware-enabled figure not published
  • IPsec VPN Throughput: 17.8 Gbps (FTD, 1024-byte TCP, fastpath); 33 Gbps projected with VPN offload on FTD 7.2
  • Max Sessions: 6,000,000 concurrent sessions (FTD with AVC)
  • New Sessions/sec: 240,000 new connections per second (FTD with AVC)
  • Interfaces: 8 x 10M/100M/1GBASE-T (RJ-45); 8 x 1/10/25G SFP; optional network module with 4 x 40G or 8 x 1/10/25G; up to 24 Ethernet ports total; 1 x 1/10G SFP management; 1 x RJ-45 console
  • Form Factor: 1RU rack-mount; dual 400W AC PSUs (1+1), optional DC

Curation Review

  • ✔ Pros: Up to 38 Gbps firewall and AVC/IPS throughput (1024-byte packets); 6 million concurrent sessions and 240,000 new connections per second; 15,000 max VPN peers with 33 Gbps projected VPN throughput under offload on FTD 7.2; Up to 24 Ethernet ports with optional 40G network module for flexible uplink and segment design; Redundant 1+1 AC power supplies in a 1RU chassis, with an optional DC power variant
  • ✘ Cons: High acquisition cost compared with mid-range firewalls, and reseller prices vary widely; Threat prevention throughput is not separately published, since the AVC+IPS figure matches the firewall figure and no malware-enabled number is listed; Headline VPN offload figure requires FTD 7.2 or later and is a projection; Published throughput uses 1024-byte lab traffic, so real-world mixed-traffic performance will likely be lower; Network module bay adds cost and configuration complexity for the 40G option
  • Est. Price: $59,480 - $138,825

Compare Against

Ubiquiti Enterprise Fortress Gateway (EFG)
Ubiquiti Enterprise Fortress Gateway (EFG)
★ 4.9 Value Score

Technical Specifications

  • Firewall Throughput: 23.5 Gbps (routing, iPerf3, DHCP WAN)
  • Threat Prevention Throughput: 12.5 Gbps (IDS/IPS)
  • IPsec VPN Throughput: 580 Mbps (site-to-site, single tunnel)
  • Max Sessions: 1,000,000 concurrent
  • New Sessions/sec: 71,000 (listed under general capacity; not specific to VPN or IPsec)
  • Interfaces: 2x 2.5GbE RJ45, 2x 25G SFP28, 2x 10G SFP+ (some listings show 2x RJ45 + 4x SFP28; verify against the Ubiquiti datasheet)
  • Form Factor: 1U rack-mount, dual hot-swappable PSUs
  • SSL/TLS Inspection Concurrent Sessions: 10,000 (5,000 recommended under heavy traffic)
  • CPU / Memory: 18-core ARM v8.2 @ 2 GHz, 16 GB DDR4
  • UniFi Capacity: 500+ UniFi devices, 5,000+ clients

Curation Review

  • ✔ Pros: 25G SFP28 and 10G SFP+ uplinks at a gateway price point; 23.5 Gbps routing throughput; 1 million concurrent sessions; 18-core ARM CPU with 16 GB RAM; hot-swappable redundant PSUs; supports 500+ UniFi devices and 5,000+ clients; manages through UniFi Network controller with a single pane of glass
  • ✘ Cons: IPsec VPN throughput of 580 Mbps is low for a gateway at this price; IDS/IPS throughput of 12.5 Gbps halves routing performance when threat inspection is enabled; SSL/TLS inspection is limited to about 10,000 concurrent sessions; port configuration differs across listings and should be verified; frequently out of stock at major US retailers, with a $170 memory surcharge at some resellers; no built-in Wi-Fi, so it depends on separate UniFi APs and switches; reviewers cite a steeper learning curve than consumer-grade routers
  • Est. Price: $1,999 - $2,892

Popular Comparisons

Cisco Secure Firewall 3130 vs Ubiquiti UniFi Cloud Gateway Fiber Cisco Secure Firewall 3130 vs Ubiquiti UniFi Dream Machine Pro Max Cisco Secure Firewall 3130 vs Ubiquiti Cloud Gateway Max Cisco Secure Firewall 3130 vs Ubiquiti UniFi Cloud Gateway Max (UCG-Max) Cisco Secure Firewall 3130 vs Ubiquiti Enterprise Fortress Gateway (EFG)