Cisco Secure Firewall 4200 Manual

Also see for 3110: Hardware installation guide Hardware installation guide Manual Message guide Getting started

Multi-Instance Mode for the Secure Firewall3100/4200You can deploy the Secure Firewall 3100/4200 as a single device (appliance mode) or as multiple containerinstances (multi-instance mode). This chapter describes how to deploy the device in multi-instance mode.• About Multi-Instance Mode, on page 1• Licenses for Instances, on page 14• Requirements and Prerequisites for Instances, on page 14• Guidelines and Limitations for Instances, on page 16• Configure Instances, on page 18• Monitoring Multi-Instance Mode, on page 63• History for Multi-Instance Mode, on page 66About Multi-Instance ModeIn multi-instance mode, you can deploy multiple container instances on a single chassis that act as completelyindependent devices.Multi-Instance Mode vs. Appliance ModeYou can run the device in either multi-instance mode or appliance mode.Appliance ModeAppliance mode is the default. The device runs the native threat defense image and acts as a single device.The only chassis-level configuration available (on the Chassis Manager page) is for network modulemanagement (breakout ports or enabling/disabling a network module).Multi-Instance ModeIf you change to multi-instance mode, the device runs the Secure Firewall eXtensible Operating System(FXOS) on the chassis, while each instance runs separate threat defense images. You can configure the modeusing the FXOS CLI.Because multiple instances run on the same chassis, you need to perform chassis-level management of:• CPU and memory resources using resource profiles.Multi-Instance Mode for the Secure Firewall 3100/42001