2/27/2017 CompareModelsCisco

6 of 6 products shown Export to Excel

Cisco 4000 Series Integrated Services Routers /

4221 4321 4331 4351
Compare Models
Expand all

Features

Form factor Form factor Form factor Form factor

1 RU Desktop 1 RU Desktop 1 RU 2 RU

Integrated WAN Ports Integrated WAN Ports Integrated WAN Ports Integrated W
GE / SEP GE / SEP GE / SEP 2 PoE GE /

1 Ge GE GE GE / SEP

SFP

Performance Performance Performance Performanc

35Mbps 50 Mbps 100 Mbps 200 Mbps

Upgradable to 75 Mbps Upgradable to 100 Mbps Upgradable to 300 Mbps Upgradable

Management port Management port Management port Manageme

1 GE (Integrated out of Band) 2 GE (Integrated out of Band) 3 GE (Integ

Network Interface Modules Network Interface Modules Network Interface Modules Network Int
(NIM) (NIM) (NIM) (NIM)
2 2 2 3

Enhanced Services Modules Enhanced Services Modules Enhanced Services Modules Enhanced S
(SM-X) (SM-X) (SM-X) (SM-X)
N/A N/A single-wide 2 single- o

http://www.cisco.com/c/en/us/products/routers/4000seriesintegratedservicesroutersisr/modelscomparison.html 1/6
2/27/2017 CompareModelsCisco

Integrated Services
6 of 6 products Card (ISC)
shown Export toIntegrated
Excel Services Card (ISC) Integrated Services Card (ISC) Integrated S
slots slots slots slots
N/A 1 (PVDM 4) 2 (PVDM 4) 3 (PVDM 4

4221 4321 4331 4351

USB Ports (type A) USB Ports (type A) USB Ports (type A) USB Ports
Expand
1 all 1 1 2

Default/max Flash Default/max Flash Default/max Flash Default/ma

8 GB 4 GB / 8 GB 4 GB / 16 GB 4 GB / 16 G

Default/max DRAM Default/max DRAM Default/max DRAM Default/ma

4 GB 4 GB / 8 GB 4 GB / 16 GB 4 GB / 16 G

Power supply type Power supply type Power supply type Power supp
External: AC External: AC, PoE External: AC, PoE External: AC

Redundant power supply Redundant power supply Redundant power supply Redundant
No No No No

Module online insertion and Module online insertion and Module online insertion and Module onl
removel (OIR) removel (OIR) removel (OIR) removel (O
No Yes Yes Yes

Server virtualization platform Server virtualization platform Server virtualization platform Server virtu
(UCS E-Series) and Network (UCS E-Series) and Network (UCS E-Series) and Network (UCS E-Se
Compute Engine (NCE) Compute Engine (NCE) Compute Engine (NCE) Compute E
N/A 2-core single-wide, 2-core 2-core sing
NCE NCE

4-core NCE 4-core single-wide, 4-core 4-core sing

NCE NCE

4-core dou

6-core dou

8-core dou
http://www.cisco.com/c/en/us/products/routers/4000seriesintegratedservicesroutersisr/modelscomparison.html 2/6
2/27/2017 CompareModelsCisco

6 of 6 products shown Export to Excel

Advanced Security

4221
Zone-based rewall and NAT
4321
Zone-based rewall and NAT
4331
Zone-based rewall and NAT
4351
Zone-base
services services services services
Expand all Firewall and
VRF-Aware VRF-Aware Firewall and VRF-Aware Firewall and VRF-Aware
Network Address Translation Network Address Translation Network Address Translation Network Ad
(NAT) (NAT) (NAT) (NAT)

Hardware VPN Hardware VPN Hardware VPN Hardware V

acceleration(DES, 3DES, AES) acceleration(DES, 3DES, AES) acceleration(DES, 3DES, AES) acceleratio
Yes Yes Yes Yes

IPSEC VPN services IPSEC VPN services IPSEC VPN services IPSEC VPN
FlexVPN, Easy VPN remote FlexVPN, Easy VPN remote FlexVPN, Easy VPN remote FlexVPN, E
server, Enhanced Easy VPN, server, Enhanced Easy VPN, server, Enhanced Easy VPN, server, Enh
Dynamic Multipoint VPN Dynamic Multipoint VPN Dynamic Multipoint VPN Dynamic M
(DMVPN) (DMVPN) (DMVPN) (DMVPN)

Group Encrypted Transport Group Encrypted Transport Group Encrypted Transport Group Encr
VPN (GET VPN), V3PN, MPLS VPN (GET VPN), V3PN, MPLS VPN (GET VPN), V3PN, MPLS VPN (GET V
VPN VPN VPN VPN

SSL VPN SSL VPN SSL VPN SSL VPN

No No No No

Intrusion prevention Intrusion prevention Intrusion prevention Intrusion pr

Yes (Snort for Singnature Yes (Snort for Singnature Yes (Snort for Singnature Yes (Snort
Based and FirePower as nGIPS) Based and FirePower as nGIPS) Based and FirePower as nGIPS) Based and

Anomaly Detection and Anomaly Detection and Anomaly Detection and Anomaly De
Machine Learning Machine Learning Machine Learning Machine Le
Cisco Self Learning Networks Cisco Self Learning Networks Cisco Self Learning Networks Cisco Self L
(SLN) (SLN) (SLN) (SLN)

Network foundation protection Network foundation protection Network foundation protection Network fo
ACL, FPM, control plan ACL, FPM, control plan ACL, FPM, control plan ACL, FPM,
protection, control plane protection, control plane protection, control plane protection,
policing (CoPP), QoS, role- policing (CoPP), QoS, role- policing (CoPP), QoS, role- policing (Co
based CLI access, source- based CLI access, source- based CLI access, source- based CLI a
based RTBH, uRPF, SSHv2 based RTBH, uRPF, SSHv2 based RTBH, uRPF, SSHv2 based RTB

Cisco Umbrella Branch Support Cisco Umbrella Branch Support Cisco Umbrella Branch Support Cisco Umb

http://www.cisco.com/c/en/us/products/routers/4000seriesintegratedservicesroutersisr/modelscomparison.html 3/6
2/27/2017 CompareModelsCisco

Yes Yes Yes Yes

6 of 6 products shown Export to Excel

Cisco Cloud Web Security Cisco Cloud Web Security Cisco Cloud Web Security Cisco Clou
4221
Yes 4321
Yes 4331
Yes 4351
Yes

Expand all
Identity-based networking Identity-based networking Identity-based networking Identity-ba
No No No No

Cisco TrustSec Cisco TrustSec Cisco TrustSec Cisco Trust

Security Group Tag Exchange Security Group Tag Exchange Security Group Tag Exchange Security Gr
Protocol (SXP), SGT over Protocol (SXP), SGT over Protocol (SXP), SGT over Protocol (S
GETVPN GETVPN GETVPN GETVPN

SGT over IPSEC SGT over IPSEC SGT over IPSEC SGT over IP

SGT over DMVPN SGT over DMVPN SGT over DMVPN SGT over D

SGT-based ZBFW SGT-based ZBFW SGT-based ZBFW SGT-based

Port/Layer 3 Port/Layer 3 Port/Layer 3 Port/Layer

interface/IP/subnet-to-SGT interface/IP/subnet-to-SGT interface/IP/subnet-to-SGT interface/IP
mapping mapping mapping mapping

SGT export in Flexible NetFlow SGT export in Flexible NetFlow SGT export in Flexible NetFlow SGT export

Uni ed Communications

Routing and Multicast

Wireless LAN

Wireless WAN

Integrated Switching

Maximum switched Ethernet Maximum switched Ethernet Maximum switched Ethernet Maximum s
ports ports ports ports
2x8 16 40 72

http://www.cisco.com/c/en/us/products/routers/4000seriesintegratedservicesroutersisr/modelscomparison.html 4/6
2/27/2017 CompareModelsCisco

6 of 6 products shown Export to Excel

Maximum switched Ethernet Maximum switched Ethernet Maximum switched Ethernet Maximum s
LAN ports with PoE LAN ports with PoE LAN ports with PoE LAN ports w
0 16 40 72
4221 4321 4331 4351
PoE support (wattage) PoE support (wattage) PoE support (wattage) PoE suppor
Expand all
N/A 120 W 250 W 500 W

without PoE boost without PoE boost without PoE boost without PoE

PoE support (wattage) PoE support (wattage) PoE support (wattage) PoE suppor
N/A 260 W 500 W 950 W

with PoE boost with PoE boost with PoE boost with PoE bo
(no power supply redundancy)

EtherSwitch Service Module EtherSwitch Service Module EtherSwitch Service Module EtherSwitch
type (width) type (width) type (width) type (width
N/A N/A single 2 single or

Application Services

Intelligent Path Control Intelligent Path Control Intelligent Path Control Intelligent P
PfR PfR PfR PfR

Network Contention Control Network Contention Control Network Contention Control Network Co
QoS, HQoS QoS, HQoS QoS, HQoS QoS, HQoS

Application Visibility Application Visibility Application Visibility Application

NBAR v2 NBAR v2 NBAR v2 NBAR v2

WAN Optimization WAN Optimization WAN Optimization WAN Optim

N/A ISR-WAAS ISR-WAAS, ISR-WAAS

vWAAS on UCS E-Series vWAAS on

Akamai Connect Akamai Connect Akamai Connect Akamai Con

N/A Yes Yes Yes
http://www.cisco.com/c/en/us/products/routers/4000seriesintegratedservicesroutersisr/modelscomparison.html 5/6
2/27/2017 CompareModelsCisco

6 of 6 products shown Export to Excel

Cisco Application Centric Cisco Application Centric Cisco Application Centric Cisco Appl
Infrastructure Infrastructure Infrastructure Infrastructu
4221 Policy Infrastructure
Application 4321 Policy Infrastructure
Application 4331 Policy Infrastructure
Application 4351
Application
Controller (APIC) with Controller (APIC) with Controller (APIC) with Controller (
Enterprise Module Enterprise Module Enterprise Module Enterprise M
Expand all

With CAT6 LTE Advanced theoretical DL speed of 300 Mbps, with 2 NIM slots ISR4221 and
ISR4321, customer may need the performance license to maximize CAT6 LTE Advanced
theoretical full potential capability with 2 NIM CAT6 LTE Advanced slots depending on speci c
carrier SP provisioning capability & capacity.

Contacts

Feedback

Terms & Conditions

Privacy

Cookies

Trademarks

http://www.cisco.com/c/en/us/products/routers/4000seriesintegratedservicesroutersisr/modelscomparison.html 6/6