FPR1010-ASA-K9 – 8x1G RJ45 Ports (2 PoE+) – 60W PoE Budget – ASA Firewall
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR1010-ASA-K9 Description
The FPR1010-ASA-K9 is a Cisco Firepower 1010 desktop firewall appliance running Cisco Secure Firewall ASA software for small offices and remote branches. The appliance has eight 1G RJ-45 ports, two of them 30W PoE+ ports within a 60W budget, and it delivers 2 Gbps of stateful inspection throughput, 500 Mbps of IPsec VPN throughput and 75 VPN peers. Failover runs only as an Active/Standby pair with the Security Plus license, and multiple security contexts are not supported.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Software application |
Cisco Secure Firewall ASA |
|
Network ports |
8 x 10/100/1000 RJ-45 (Ethernet 1/1 to 1/8) |
|
PoE+ ports |
Ethernet 1/7 and 1/8, IEEE 802.3at, up to 30W per port |
|
Default PoE budget |
60W PoE+ power |
|
Default power supply |
PWR-DT-150W-AC, 150W AC, external |
|
Stateful inspection firewall throughput |
2 Gbps (1500B UDP) |
|
Stateful inspection firewall throughput (multiprotocol) |
1.4 Gbps |
|
IPsec VPN throughput |
500 Mbps (450B UDP L2L test) |
|
Maximum VPN peers |
75, all peer types combined |
|
Concurrent firewall connections |
100,000 |
|
High availability |
Active/Standby with the Security Plus license |
|
Form factor |
Compact desktop, fanless, 0 dBA |
|
Minimum ASA release for switch ports and PoE+ |
9.13(1) |
Product Performance
Key Features
Only Ethernet 1/7 and 1/8 supply power, at up to 30W each under IEEE 802.3at, and both draw from the 60W PoE+ budget. An access point and an IP phone can run from the firewall itself, while Ethernet 1/1 through 1/6 carry data only.
Each of the eight network ports runs as a firewall interface or as a Layer 2 hardware switch port. By default Ethernet 1/1 is the firewall interface and Ethernet 1/2 through 1/8 share VLAN 1, and hosts on the same VLAN are switched in hardware without passing the ASA security policy.
Up to 60 VLAN interfaces can sit in front of the switch ports, but none of them run dynamic routing, multicast routing, policy-based routing or ECMP. A dynamic routing neighbor therefore connects through a firewall interface such as Ethernet 1/1.
The appliance pairs only as Active/Standby, with no Active/Active failover, clustering or multiple context mode. Switch ports keep forwarding on the standby unit and can create loops, so a failover pair moves LAN switching to an external switch.
Site-to-site tunnels and Cisco Secure Client sessions count against a single 75-peer limit rather than separate pools. Remote-access sessions also need a Secure Client license, because peers are unlicensed by default.
With no fan and side-to-side airflow, the chassis is rated at 0 dBA and can sit on a desk in an occupied room. Internal temperature runs well above ambient, the 40°C operating limit drops 1.5°C per 1,000 ft of altitude, and the four rubber feet must stay on for cooling.
Application Scenarios
In a small office, the appliance terminates the internet circuit on Ethernet 1/1 and connects desktops and printers to its built-in switch ports, with a wireless access point powered from Ethernet 1/7.
A remote branch uses the firewall as the site-to-site IPsec endpoint that joins the branch LAN to the headquarters network, with up to 75 peers across all VPN types.
A retail store or clinic without a wiring closet can keep the fanless unit in a back office, where it powers an IP camera or phone from a PoE+ port and protects the point-of-sale or front-desk network.
Product Comparison
|
Parameter |
FPR1010-ASA-K9 |
FPR1010E-ASA-K9 | ||
|---|---|---|---|---|
|
Stateful inspection firewall throughput |
2 Gbps (1500B UDP) |
N/A for Threat Defense |
2 Gbps (1500B UDP) |
4.5 Gbps (1500B UDP) |
|
Throughput: FW + AVC (1024B) |
N/A for ASA |
890 Mbps |
N/A for ASA |
N/A for ASA |
|
IPsec VPN throughput |
500 Mbps (450B UDP L2L test) |
400 Mbps (1024B TCP with Fastpath) |
500 Mbps (450B UDP L2L test) |
1 Gbps (450B UDP L2L test) |
|
Maximum VPN peers |
75 |
75 |
75 |
150 |
|
Network interfaces |
8 x 1000BASE-T |
8 x 1000BASE-T |
8 x 1000BASE-T |
8 x 1000BASE-T, 4 x SFP |
|
Power over Ethernet |
2 ports PoE+ (IEEE 802.3at), 60W default PoE budget |
2 ports PoE+ (IEEE 802.3at), 60W default PoE budget |
N/A, PoE not supported |
N/A, PoE not supported |
|
Power supply configuration |
External AC, PWR-DT-150W-AC |
External AC, PWR-DT-150W-AC |
External AC, PWR-DT-66WAC |
Integrated, single AC input |
|
High availability |
Active/Standby with Security Plus license |
Active/Standby |
Active/Standby with Security Plus license |
Active/Active and Active/Standby |
|
Security contexts (included; maximum) |
N/A for Threat Defense |
N/A for Threat Defense |
N/A for Threat Defense |
2; 5 |
FPR1010-ASA-K9 and FPR1010E-ASA-K9 share the 2 Gbps ASA rating, 75 VPN peers and eight 1000BASE-T ports, but only FPR1010-ASA-K9 has PoE+ on Ethernet 1/7 and 1/8 with a 60W budget on its 150W supply; FPR1010E-ASA-K9 has no PoE and ships with the 66W PWR-DT-66WAC, which suits sites where every endpoint has its own power. Threat defense subscriptions attach only to the same hardware ordered as FPR1010-NGFW-K9, which runs Threat Defense at 890 Mbps firewall plus AVC. Sites that need Active/Active failover, security contexts, 4.5 Gbps, 150 VPN peers or four SFP ports move to FPR1120-ASA-K9, a 1RU model without PoE that includes 2 contexts and licenses up to 5.
PoE Power Planning
|
Planning Item |
Value or Check |
|---|---|
|
PoE-capable ports |
Ethernet 1/7 and 1/8 only; Ethernet 1/1 to 1/6 carry no power |
|
PoE standards and per-port limit |
IEEE 802.3af PoE and 802.3at PoE+, up to 30W per port |
|
Total PoE budget |
60W of PoE+ power on the default PWR-DT-150W-AC supply |
|
Device count |
Two powered endpoints at most, one per PoE+ port |
|
Default allocation |
power inline auto reserves the class maximum, so a class 4 endpoint that requests 12.95W still takes 30W of the 60W |
|
Manual allocation |
power inline consumption wattage sets 4,000 to 30,000 mW per port and turns off LLDP negotiation |
|
Conditions that remove power |
Shutting the interface down, or adding the port to an EtherChannel, stops PoE on that port |
|
Software baseline |
ASA 9.13(1) or later for PoE+ |
Ordering Checklist
- ASA Essentials license: Add the free L-FPR1000-ASA= Base license to the Smart Account the appliance will register to. ASA on Firepower hardware runs on Smart Licensing, so the appliance has no ASA license until it is registered.
- Security Plus for a failover pair: Include L-FPR1010-SEC-PL= for each unit, and enable Essentials and Security Plus on both before configuring failover. Two-box Active/Standby failover cannot be configured without Security Plus.
- Encryption level: Confirm the Smart Account export setting allows Strong (3DES/AES), or add L-FPR1K-ENC-K9=; a failover pair needs the same level on both units. Without it the ASA stays at Base (DES) encryption, and the license is unavailable in export-restricted regions.
- Secure Client licensing: Add a Secure Client Advantage, Premier or VPN Only license when remote users will connect. Secure Client peers are unlicensed by default.
- Mounting kit: Order FPR1K-DT-WALL-MNT= for wall mounting or FPR1010-RACK-MNT= for rack mounting, the kit made for the 150-W supply. The 150-W supply needs a deeper rack shelf, and FPR1K-DT-RACK-MNT= is the kit for the 66-W supply of FPR1010E-ASA-K9.
- Power cord: Select the country power cord (C13 type) with the order, or supply an approved cord. The cord is a separate order option and only approved cords are supported.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1010-SEC-PL= |
Security Plus license for Firepower 1010 Active/Standby failover |
|
L-FPR1K-ENC-K9= |
Firepower 1000 Series ASA strong encryption (3DES/AES) license, export controlled |
|
PWR-DT-150W-AC= |
Spare 150W desktop AC power supply for the Firepower 1010 |
|
FPR1010-RACK-MNT= |
Rack-mount kit for the Firepower 1010 with the 150W AC power supply |
|
FPR1K-DT-WALL-MNT= |
Wall-mount kit for the Firepower 1010 and 1010E |
|
FPR1K-DT-FIPS-KIT= |
FIPS kit for the Firepower 1010 |
|
FPR1K-DT-ACY-KIT= |
Accessory kit for the Firepower 1010 |
FPR1010-ASA-K9 Front View
|
1 |
Status LEDs |
2 |
Management port |
|
3 |
Lock slot |
4 |
Power cord socket |
|
5 |
Network data ports |
6 |
Console port |
|
7 |
USB Mini B port |
8 |
USB Type A port |
|
9 |
Reset button |
10 |
Rubber feet |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1010-ASA-K9 | Software application | Cisco Secure Firewall ASA; the hardware also supports Firewall Threat Defense |
| Network interfaces | 8 x 1000BASE-T, RJ-45 10/100/1000 (Ethernet 1/1 to 1/8), auto MDI/X | Interface modes | Each network port configurable as a firewall interface or Layer 2 hardware switch port; by default Ethernet 1/1 is a firewall interface and Ethernet 1/2 to 1/8 are switch ports in VLAN 1 |
| Power over Ethernet | 2 ports PoE+ (IEEE 802.3at) on Ethernet 1/7 and 1/8, IEEE 802.3af also supported, up to 30W per port | Default PoE budget | 60W PoE+ power |
| Management interfaces | 1 x 1000BASE-T management port; 1 x RJ-45 serial console; 1 x USB Mini B console | USB | 1 x USB 3.0 Type-A for external storage |
| Stateful inspection firewall throughput | 2 Gbps (1500B UDP) | Stateful inspection firewall throughput (multiprotocol) | 1.4 Gbps |
| Concurrent firewall connections | 100,000 | New connections per second | 25,000 |
| IPsec VPN throughput | 500 Mbps (450B UDP L2L test) | Maximum VPN peers | 75, all peer types combined |
| Secure Client peers | Unlicensed by default; optional Secure Client Advantage, Premier, or VPN Only license, maximum 75 | Total TLS proxy sessions | 4,000 |
| High availability | Active/Standby failover with the Security Plus license | Clustering | Not supported |
| Security contexts | Not supported | VLANs, maximum | 60 |
| VLAN ID range | 1 to 4070, excluding 3968 to 4047 reserved for internal use | Named interfaces, maximum | 60 |
| System memory | 8 GB | Storage | 1 x 200 GB M.2 SATA SSD, not field-replaceable |
| Default power supply | PWR-DT-150W-AC, external 150W AC (150 W of +12 VDC system power) | System power | 30 W, not including connected PoE devices |
| AC input voltage | 100 to 240V AC | AC frequency | 50 to 60 Hz |
| AC maximum current draw | < 2A at 100V, < 1A at 240V | AC efficiency | >88% at 50% load |
| Power switch | No power switch; the chassis powers on when the AC power supply is plugged in | Fans | No fan; side-to-side airflow |
| Noise | 0 dBA | Form factor | Compact desktop or wall mount; 2 RU with the rack-mount shelf |
| Dimensions (H x W x D) | 1.82 x 7.85 x 8.07 in. (4.62 x 19.94 x 20.50 cm) | Rack-mount shelf dimensions (H x W x D) | 3.06 x 17.40 x 21.65 in. (7.77 x 44.2 x 54.99 cm) for the 150W supply |
| Weight | 3 lb (1.36 kg) | Temperature: operating | 32 to 104°F (0 to 40°C); derate the maximum 1.5°C per 1000 ft above sea level |
| Temperature: nonoperating | -13 to 158°F (-25 to 70°C) | Humidity: operating | 90% noncondensing |
| Humidity: nonoperating | 10 to 90% noncondensing | Altitude: operating | 9,843 ft (3,000 m) |
| Altitude: nonoperating | 15,000 ft (4,570 m) | Physical security | Kensington T-bar lock slot |
| Reset button | Recessed; held for more than three seconds, it restores the default configuration after the next reboot | Minimum ASA release | 9.13(1) for switch ports and PoE+ |
| ASA compatibility | ASA 9.24(1) with ASDM 7.24(1) supported | Management | ASDM for local management; Cisco Security Manager or Cisco Defense Orchestrator for centralized management |
| Regulatory compliance | CE markings per directives 2004/108/EC and 2006/108/EC | Safety | UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1, GB4943 |
| EMC: emissions | 47CFR Part 15 Class A (FCC Class A), AS/NZS CISPR22 Class A, CISPR22 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A, EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN300386, TCVN7189 | EMC: immunity | EN55024, CISPR24, EN300386, KN24, TVCN 7317, EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6, EN-61000-4-8, EN61000-4-11 |
| Supply chain assurance | Cisco Trust Anchor Technologies | Package contents | Chassis and power supply; USB console cable (37-1977-01) and country-specific power cord when ordered |
Get More Information
Need pricing, stock, or shipping details for the FPR1010-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What is Cisco FPR1010-ASA-K9?
-
Who should choose FPR1010-ASA-K9 instead of the NGFW version?
-
Does FPR1010-ASA-K9 have the same ports as FPR1010-NGFW-K9?
-
Can FPR1010-ASA-K9 run next-generation firewall features?
-
Is FPR1010-ASA-K9 a good ASA 5506-X replacement?
-
Can FPR1010-ASA-K9 be used for site-to-site VPN?
-
What should buyers verify before ordering FPR1010-ASA-K9?
-
When is FPR1010-ASA-K9 too small?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Quality control on Layer23’s end is clearly thorough.
Order arrived exactly as expected. Couldn’t be happier. Would have liked a tracking update sooner, but the product is great.
Delivery window was accurate. We could schedule our installation team in advance.
Efficiency is key. You guys nailed it. Good packaging.
Needed this urgently. Sales rep expedited the order. Thank you!