FPR1120-ASA-K9 – 4.5G ASA Firewall – 8xRJ45 4xSFP – 1RU 1120
Shop Expert-Recommended Accessories for the FPR1120-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR1120-ASA-K9 Description
The FPR1120-ASA-K9 is a Cisco Firepower 1120 1RU firewall appliance running Cisco Secure Firewall ASA software for branch and internet-edge sites. The appliance has eight 1000BASE-T ports and four SFP ports, and it delivers 4.5 Gbps of stateful inspection throughput, 1 Gbps of IPsec VPN throughput, 200,000 concurrent firewall connections and 150 VPN peers. ASA runs Active/Active and Active/Standby failover, with two security contexts included and five as the maximum.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1120-ASA-K9 |
|
Product type |
Cisco Firepower 1120 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB SATA SSD |
|
Internal power input |
Single fixed internal AC power supply |
|
Fan design |
1 fixed fan |
|
Stateful inspection firewall throughput |
4.5 Gbps |
|
ASA multiprotocol firewall throughput |
2.5 Gbps |
|
Concurrent firewall connections |
200000 |
Product Performance
Key Features
The chassis pairs eight 1000BASE-T ports with four fixed SFP ports, so a fiber link needs no media converter. GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD and GLC-ZX-SMD are the supported 1G optics.
Both Active/Active and Active/Standby pairs are supported. Only the active unit requests the Smart license, and the standby unit adds no license cost.
The Essentials license includes two security contexts and the maximum is five. Each context gets its own policy and interfaces, which separates tenants or departments on one chassis.
Site-to-site and remote-access peers share a limit of 150, and IPsec VPN throughput is 1 Gbps. Cisco Secure Client peers are unlicensed until an Advantage, Premier or VPN Only license is added.
The ASA runs at Base (DES) encryption unless the Smart Account export setting allows Strong (3DES/AES). A failover pair needs the same level on both units.
The power supply is integrated with a single AC input, drawing up to 100W, and the chassis has one fan rated at 31.7 dBA at 25C. Power redundancy therefore comes from a second chassis rather than a second supply.
Application Scenarios
At a branch that needs more than a desktop firewall, the appliance sits in the 1RU rack space of the communications room and terminates the internet circuit and IPsec tunnels back to headquarters.
In a small data room, the eight RJ-45 ports connect the inside network and DMZ servers while an SFP port carries a fiber handoff to the service provider or an upstream switch.
A managed-service provider or a multi-department site can split one chassis into separate firewalls, using the two included security contexts and up to five with the add-on license.
Product Comparison
|
Parameter |
FPR1120-ASA-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput |
4.5 Gbps (1500B UDP) |
N/A for Threat Defense |
6 Gbps (1500B UDP) |
|
Throughput: FW + AVC + IPS (1024B) |
N/A for ASA |
2.3 Gbps |
N/A for ASA |
|
IPsec VPN throughput |
1 Gbps (450B UDP L2L test) |
1.2 Gbps (1024B TCP with Fastpath) |
1.2 Gbps (450B UDP L2L test) |
|
Concurrent firewall connections |
200,000 |
N/A for Threat Defense |
400,000 |
|
Maximum concurrent sessions with AVC |
N/A for ASA |
200K |
N/A for ASA |
|
Maximum VPN peers |
150 |
150 |
400 |
|
Security contexts (included; maximum) |
2; 5 |
N/A for Threat Defense |
2; 5 |
|
Network interfaces |
8 x 1000BASE-T, 4 x SFP |
8 x 1000BASE-T, 4 x SFP |
8 x 1000BASE-T, 4 x SFP |
|
Power supply configuration |
Integrated, single AC input |
Integrated, single AC input |
Integrated, single AC input |
FPR1120-ASA-K9 and FPR1120-NGFW-K9 are the same 1RU chassis with 8 x RJ-45 and 4 x SFP ports, split by software: FPR1120-ASA-K9 runs ASA at 4.5 Gbps stateful inspection, while FPR1120-NGFW-K9 runs Firewall Threat Defense, the only build that takes threat defense subscriptions, at 2.3 Gbps FW + AVC + IPS. Where ASA must carry more than 200,000 connections or 150 VPN peers, FPR1140-ASA-K9 raises them to 400,000 and 400, with 6 Gbps stateful inspection and 1.2 Gbps IPsec VPN. Both ASA models include 2 security contexts and list a maximum of 5.
Ordering Checklist
- ASA Essentials license: Add the free L-FPR1000-ASA= Base license to the Smart Account the appliance will register to. ASA on Firepower hardware runs on Smart Licensing, so the appliance has no ASA license until it is registered.
- Security contexts: The base license includes 2 contexts and the data sheet lists a maximum of 5; add L-FPR1K-ASASC-5= or L-FPR1K-ASASC-10=, the 1000 Series context PIDs, for more. Contexts beyond the 2 included are not available without an add-on license.
- Encryption level: Confirm the Smart Account export setting allows Strong (3DES/AES), or add L-FPR1K-ENC-K9=; a failover pair needs the same level on both units. Without it the ASA stays at Base (DES) encryption, and the license is unavailable in export-restricted regions.
- Secure Client licensing: Add a Secure Client Advantage, Premier or VPN Only license when remote users will connect. Secure Client peers are unlicensed by default.
- Failover pair: Order two identical chassis; only the active unit requests the license and the standby unit carries no extra license cost. A second set of ASA licenses is not needed for the standby unit.
- Accessory kits: Add FPR1K-RM-FIPS-KIT=, FPR1K-RM-ACY-KIT= and FPR1K-CBL-MGMT=, which are separate spare PIDs for the 1120, 1140 and 1150 appliances. Kits not on the order have to be bought later as spares.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1000-ASA= |
Cisco Firepower 1000 Series ASA Essentials license |
|
L-FPR1K-ASASC-5= |
Cisco Firepower 1000 Series add-on 5 security context license |
|
L-FPR1K-ENC-K9= |
Strong encryption license for Firepower 1000 Series ASA software |
|
FPR1K-CBL-MGMT= |
Cable management brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-ACY-KIT= |
Accessory kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-BRKT= |
Rackmount brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-FIPS-KIT= |
FIPS kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-SSD200= |
200 GB SSD for Firepower 1120, 1140, and 1150 appliances |
|
1000BASE-T SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-SX SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-LX/LH SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-EX SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-ZX SFP transceiver listed for Firepower 1120 fixed SFP ports |
FPR1120-ASA-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1120-ASA-K9 | Product type | Cisco Firepower 1120 ASA firewall appliance |
| Firewall model | Firepower 1120 | Security software role | Cisco ASA software |
| Rack units | 1RU rack mount | Fixed RJ-45 ports | 8 x RJ-45 |
| Fixed SFP ports | 4 x SFP | Management port | 1 x 1000BASE-T management port |
| Console port | RJ-45 serial console and USB Mini B serial console | USB port | 1 x USB 3.0 Type-A |
| SSD storage | 1 x 200 GB 2.5-in SATA SSD | Airflow | I/O side to non-I/O side |
| Fan modules | 1 fixed fan | Default power supply | 1 fixed internal AC power supply |
| Power redundancy | No redundant power supply option listed | AC input voltage | 100 to 240V AC |
| AC input frequency | 50 to 60 Hz | AC maximum power draw | 100 W |
| AC current | Less than 2 A at 100V; less than 1 A at 240V | Mounting | 2-post brackets included |
| Weight | 3.6 kg (8 lb) | Operating temperature | 32 to 104F (0 to 40C) |
| Operating humidity | 90% noncondensing | Operating altitude | 9843 ft (3000 m) maximum |
| Fixed SFP release baseline | Threat Defense 6.4 or ASA 9.15 for listed SFPs | Supported fixed SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| High availability | Active/active and active/standby | Stateful inspection firewall throughput | 4.5 Gbps |
| Multiprotocol firewall throughput | 2.5 Gbps | Concurrent firewall connections | 200000 |
| New connections per second | 75000 | IPsec VPN throughput | 1 Gbps |
| Maximum VPN peers | 150 | Security contexts | 2 included; 5 maximum |
| Local ASA management | Adaptive Security Device Manager | ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator |
| Required ASA license | Essentials license L-FPR1000-ASA= |
Get More Information
Need pricing, stock, or shipping details for the FPR1120-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
How much memory and how many TLS proxy sessions does FPR1120-ASA-K9 have?
-
Which rack standard does FPR1120-ASA-K9 follow?
-
What AC input does FPR1120-ASA-K9 need?
-
What operating environment is FPR1120-ASA-K9 rated for?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Hardware looks and feels exactly like a top-tier product should.
Layer23 has set the bar for what we expect from a hardware vendor.
Confidence builders: their reputation, their service, and their product. All solid.
Good B2B partner. Documents were perfect for German customs.
Fast ship? You bet. Made it here in record time.