> ## Documentation Index
> Fetch the complete documentation index at: https://docs.macstadium.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Network Firewalls: Overview

> MacStadium offers a variety of Cisco(R) firewalls to protect the cloud environment. The portfolio includes several physical and virtual appliance choices.

## About

MacStadium offers a variety of Cisco® firewalls to protect the cloud environment. The portfolio includes several physical and virtual appliance choices, which exceed all security and performance requirements.

## Overview

Cisco Firepower and Cisco Secure Firewall ASA Virtual offerings deliver scalable VPN capability to access MacStadium resources, as well as, protect workloads against increasingly complex threats with world-class security controls.

<Note>
  To provision Firewalls in the MacStadium account, please [contact sales](https://www.macstadium.com/contact/sales).
</Note>

The following capabilities are available with Cisco firewalls:

* Access and manage the firewall as the root user (root access).
* Leverage [Cisco AnyConnect](https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/tsd-products-support-series-home.html) for secure remote user access.
* Filter any Internet and internal traffic real-time. For example, pass traffic from selected IPs or IP ranges (like a Jenkins master) and block all other traffic.
* Connect local infrastructure to the MacStadium private cloud through secure remote network or site-to-site encrypted Virtual Private Network (VPN) tunnels.
* Connect a public cloud, such as AWS, Azure, or Google Cloud, to the MacStadium private cloud through secure remote network or site-to-site encrypted Virtual Private Network (VPN) tunnels.
* Perform packet inspection, port blocking, and breach protection.
* Configure high availability and failover.
* Limit access to approved users to ensure complete access control.

## Getting Started

<Tip>Contact [MacStadium Sales](https://www.macstadium.com/contact/sales) for more information.</Tip>

## Standard Configurations

| Feature                                             | ASAv 10  | ASAv 30 | Firepower 2130 |
| --------------------------------------------------- | -------- | ------- | -------------- |
| Appliance Form Factor                               | Virtual  | Virtual | Physical       |
| Stateful inspection throughput max                  | 1 Gbps   | 2 Gbps  | 5.4 Gbps       |
| Stateful inspection throughput max (multi-protocol) | 1 Gbps   | 2 Gbps  | 5.4 Gbps       |
| IPsec VPN throughput                                | 750 Mbps | 2 Gbps  | 1.9 Gbps       |
| Connections per second                              | 60,000   | 200,000 | 30,000         |
| Concurrent sessions                                 | 100,000  | 500,000 | 2,000,000      |
| IPsec VPN peers                                     | 250      | 750     | 7,500          |

## Custom Hardware or Hybrid Solutions

To host a firewall in a MacStadium data center, contact MacStadium Sales to discuss requirements, available options, and involvement from the MacStadium engineering team.

You can access any enabled firewall add-ons from the MacStadium Portal under the **Add-Ons** tab in the details.

## Other options

Based on your specific requirements, you may choose to forgo the available Cisco ASAv and ASA options and implement another solution, such as the built-in OS X firewall or a third-party software firewall.

<Warning>
  MacStadium does not provide assistance with the setup, management, and troubleshooting of these solutions. MacStadium is not responsible for any security risks incurred by such implementations.
</Warning>

## Available Locations

Available in: Atlanta, Dublin, Las Vegas