Skip to main content

About

MacStadium offers a variety of Cisco® firewalls to protect the cloud environment. The portfolio includes several physical and virtual appliance choices, which exceed all security and performance requirements.

Overview

Cisco Firepower and Cisco Secure Firewall ASA Virtual offerings deliver scalable VPN capability to access MacStadium resources, as well as, protect workloads against increasingly complex threats with world-class security controls.
To provision Firewalls in the MacStadium account, please contact sales.
The following capabilities are available with Cisco firewalls:
  • Access and manage the firewall as the root user (root access).
  • Use Cisco AnyConnect for secure remote user access.
  • Filter any Internet and internal traffic real-time. For example, pass traffic from selected IPs or IP ranges (like a Jenkins master) and block all other traffic.
  • Connect local infrastructure to the MacStadium private cloud through secure remote network or site-to-site encrypted Virtual Private Network (VPN) tunnels.
  • Connect a public cloud, such as AWS, Azure, or Google Cloud, to the MacStadium private cloud through secure remote network or site-to-site encrypted Virtual Private Network (VPN) tunnels.
  • Perform packet inspection, port blocking, and breach protection.
  • Configure high availability and failover.
  • Limit access to approved users to ensure complete access control.

Getting Started

Contact MacStadium Sales for more information.

Standard Configurations

Firepower 2130 figures are Cisco’s published numbers for ASA mode, which is how MacStadium runs these appliances. Cisco also publishes a separate, lower set for Firepower Threat Defense (FTD) mode, so figures quoted elsewhere may not match.These are maximums measured under Cisco’s own test conditions, not throughput you should expect to see. Stateful inspection is measured on 1500-byte UDP traffic and IPsec VPN on 450-byte UDP, so real figures move with packet size, enabled features, and traffic mix. Treat the table as a way to compare appliances rather than as a capacity guarantee.MacStadium runs the Firepower 2130 on the ASA 9.20 train, up to 9.20.4.
MacStadium periodically upgrades firewall software to address security vulnerabilities and known bugs. See Firewall Upgrade Maintenance: What to Expect for notice periods, expected downtime, and what happens during a maintenance window.

Custom Hardware or Hybrid Solutions

To host a firewall in a MacStadium data center, contact MacStadium Sales to discuss requirements, available options, and involvement from the MacStadium engineering team. You can access any enabled firewall add-ons from the MacStadium Portal under the Add-Ons tab in the details.

Other options

Based on your specific requirements, you may choose to forgo the available Cisco ASAv and ASA options and implement another solution, such as the built-in OS X firewall or a third-party software firewall.
MacStadium does not provide assistance with the setup, management, and troubleshooting of these solutions. MacStadium is not responsible for any security risks incurred by such implementations.

Available Locations

Available in: Atlanta, Dublin, Las Vegas