FPR1120-ASA-K9 – 4.5G ASA Firewall – 8xRJ45 4xSFP – 1RU 1120
0/mo Solds
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR1120-ASA-K9 Description
FPR1120-ASA-K9 is a Cisco Firepower 1120 ASA firewall appliance in the Firepower 1000 Series for branch, internet-edge, or security-services deployments that standardize on Cisco ASA software. The 1RU rack-mount appliance combines eight fixed RJ-45 data ports, four fixed SFP ports, a dedicated 1000BASE-T management port, one 200 GB SATA SSD, and a single fixed internal AC power supply, with Cisco-listed ASA performance values including 4.5 Gbps stateful inspection firewall throughput, 2.5 Gbps multiprotocol firewall throughput, 200000 concurrent firewall connections, 1 Gbps IPsec VPN throughput, and ASA Essentials licensing for the Firepower 1100 ASA order path.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1120-ASA-K9 |
|
Product type |
Cisco Firepower 1120 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB SATA SSD |
|
Internal power input |
Single fixed internal AC power supply |
|
Fan design |
1 fixed fan |
|
Stateful inspection firewall throughput |
4.5 Gbps |
|
ASA multiprotocol firewall throughput |
2.5 Gbps |
|
Concurrent firewall connections |
200000 |
Product Performance
Key Features
Cisco identifies FPR1120-ASA-K9 as the Firepower 1120 orderable PID that runs ASA software, so the quote should not be substituted with the Threat Defense PID unless the approved design changes.
The Firepower 1120 hardware provides eight RJ-45 data interfaces and four fixed SFP interfaces in a 1RU rack-mount appliance, giving buyers a compact copper and fiber edge firewall option.
The 1120 ASA performance row sits above the desktop 1010 class and below the 1140 ASA row, which helps model selection stay aligned with throughput, connection, and VPN-peer targets.
Cisco licensing references show two included security contexts for the Firepower 1120 ASA path and a five-context maximum, so context requirements should be checked before quote release.
The 1120 uses one fixed internal AC power supply and one fixed fan, so redundancy planning must be handled at the deployment design level instead of through hot-swappable power modules.
The fixed SFP ports support Cisco-listed 1G transceiver part numbers such as GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, and GLC-ZX-SMD with the documented software baseline.
Application Scenarios
Specify FPR1120-ASA-K9 for an edge firewall refresh where the operations standard remains Cisco ASA and the design calls for the 1RU Firepower 1120 hardware row instead of a desktop 1010 appliance.
Place this SKU in the BOM when inside, outside, or transit links require both built-in RJ-45 ports and Cisco-listed 1G SFP optics on the same fixed-interface firewall.
Keep the ASA order path when change records and support ownership still reference Cisco ASA; shift to FPR1120-NGFW-K9 only for a planned Threat Defense rollout.
Product Comparison
|
Parameter |
FPR1120-ASA-K9 | ||
|---|---|---|---|
|
Cisco PID description |
Firepower 1120 NGFW appliance 1RU running ASA software |
Firepower 1120 NGFW appliance 1RU |
Firepower 1140 NGFW appliance 1RU running ASA software |
|
Firewall model |
Firepower 1120 |
Firepower 1120 |
Firepower 1140 |
|
Security software role |
Cisco ASA software |
Threat Defense / NGFW software |
Cisco ASA software |
|
Form factor |
1RU rack mount |
1RU rack mount |
1RU rack mount |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
|
Storage |
1 x 200 GB SATA SSD |
1 x 200 GB SATA SSD |
1 x 200 GB SATA SSD |
|
Primary throughput row |
ASA stateful inspection firewall 4.5 Gbps |
FTD firewall plus AVC 2.3 Gbps |
ASA stateful inspection firewall 6 Gbps |
|
Mixed security throughput row |
ASA multiprotocol firewall 2.5 Gbps |
FTD firewall plus AVC plus IPS 2.3 Gbps |
ASA multiprotocol firewall 3.5 Gbps |
|
Session or connection scale |
ASA firewall connections 200000 |
FTD sessions with AVC 200000 |
ASA firewall connections 400000 |
|
VPN throughput row |
ASA IPsec VPN 1 Gbps |
FTD IPsec VPN 1.2 Gbps |
ASA IPsec VPN 1.2 Gbps |
|
Maximum VPN peers |
150 |
150 |
400 |
|
Internal power input |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
- In a FPR1120-ASA-K9 vs FPR1120-NGFW-K9 comparison, the appliance model and fixed interface layout match, but the current SKU is the ASA software order path while FPR1120-NGFW-K9 is the Threat Defense / NGFW order path.
- The FPR1120-ASA-K9 difference from FPR1140-ASA-K9 is the ASA sizing row: the 1140 increases stateful firewall throughput, multiprotocol throughput, firewall connection scale, and maximum VPN peers.
- For buyers comparing FPR1120-ASA-K9 vs FPR1120-NGFW-K9 vs FPR1140-ASA-K9, which model to choose should follow the required software role first and the Cisco performance row second.
Selection Guide
1. Lock the ASA software role first
Choose FPR1120-ASA-K9 when the approved deployment requires Cisco ASA software on a Firepower 1120 appliance rather than Threat Defense subscriptions.
2. Use the 1120 ASA row for sizing
Select this SKU when 4.5 Gbps stateful inspection throughput, 2.5 Gbps multiprotocol firewall throughput, and 200000 concurrent firewall connections match the branch or edge firewall design.
3. Compare the NGFW PID only for software changes
Move to FPR1120-NGFW-K9 only when the BOM is changing to the Threat Defense order path, because the key difference is software role rather than the 1120 fixed-port hardware.
4. Check the 1140 when ASA capacity is short
Use FPR1140-ASA-K9 instead when the sizing file needs the higher ASA throughput, connection, or VPN-peer values listed for the Firepower 1140 model.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Exact orderable PID |
Confirm FPR1120-ASA-K9 rather than FPR1120-NGFW-K9 |
Cisco lists separate 1120 orderable roles for ASA software and Threat Defense / NGFW software |
|
ASA software plan |
Confirm the ASA image and compatible management plan |
The SKU is ordered for ASA software, so operational tools and upgrade plans must match ASA |
|
ASA Essentials license |
Include the required ASA Essentials license for the Firepower 1000 Series |
Cisco ASA getting-started guidance lists ASA Essentials as required |
|
Security contexts |
Decide whether included contexts are enough or whether an add-on context license is needed |
Cisco lists two included contexts and a five-context maximum for Firepower 1120 ASA |
|
Fixed-port media |
Match RJ-45 and SFP cabling to the firewall design |
Cisco lists specific 1G SFP part numbers and software baselines for the fixed SFP ports |
|
Power and mounting |
Confirm single fixed AC power, country power cord, rack brackets, and cable management |
The 1120 power supply and fan are fixed rather than field-replaceable modules |
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1000-ASA= |
Cisco Firepower 1000 Series ASA Essentials license |
|
L-FPR1K-ASASC-5= |
Cisco Firepower 1000 Series add-on 5 security context license |
|
L-FPR1K-ENC-K9= |
Strong encryption license for Firepower 1000 Series ASA software |
|
FPR1K-CBL-MGMT= |
Cable management brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-ACY-KIT= |
Accessory kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-BRKT= |
Rackmount brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-FIPS-KIT= |
FIPS kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-SSD200= |
200 GB SSD for Firepower 1120, 1140, and 1150 appliances |
|
GLC-TE |
1000BASE-T SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-SX-MMD |
1000BASE-SX SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-LH-SMD |
1000BASE-LX/LH SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-EX-SMD |
1000BASE-EX SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-ZX-SMD |
1000BASE-ZX SFP transceiver listed for Firepower 1120 fixed SFP ports |
FPR1120-ASA-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1120-ASA-K9 | Product Type | Cisco Firepower 1120 ASA firewall appliance |
| Firewall Model | Firepower 1120 | Security Software Role | Cisco ASA software |
| Form Factor | 1RU rack mount | Fixed RJ-45 Ports | 8 x RJ-45 |
| Fixed SFP Ports | 4 x SFP | Management Port | 1 x 1000BASE-T management port |
| Console Interfaces | RJ-45 serial console and USB Mini B serial console | USB Port | 1 x USB 3.0 Type-A |
| Storage | 1 x 200 GB 2.5-in SATA SSD | Airflow | I/O side to non-I/O side |
| Fan Modules | 1 fixed fan | Power Supply | 1 fixed internal AC power supply |
| Power Redundancy | No redundant power supply option listed | AC Input Voltage | 100 to 240V AC |
| AC Frequency | 50 to 60 Hz | AC Maximum Power Draw | 100 W |
| AC Current | Less than 2 A at 100V; less than 1 A at 240V | Rack Mounting | 2-post brackets included |
| Weight | 8 lb (3.6 kg) | Operating Temperature | 32 to 104F (0 to 40C) |
| Operating Humidity | 90% noncondensing | Operating Altitude | 9843 ft (3000 m) maximum |
| Fixed SFP Release Baseline | Threat Defense 6.4 or ASA 9.15 for listed SFPs | Supported Fixed SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| High Availability | Active/active and active/standby | Stateful Inspection Firewall Throughput | 4.5 Gbps |
| Multiprotocol Firewall Throughput | 2.5 Gbps | Concurrent Firewall Connections | 200000 |
| New Connections Per Second | 75000 | IPsec VPN Throughput | 1 Gbps |
| Maximum VPN Peers | 150 | Security Contexts | 2 included; 5 maximum |
| Local ASA Management | Adaptive Security Device Manager | ASA Centralized Management | Cisco Security Manager or Cisco Defense Orchestrator |
| Required ASA License | Essentials license L-FPR1000-ASA= |
Get More Information
Need pricing, stock, or shipping details for the FPR1120-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What is Cisco FPR1120-ASA-K9 used for?
-
How does FPR1120-ASA-K9 compare with FPR1010-ASA-K9?
-
Does FPR1120-ASA-K9 support fiber connections?
-
Why would a buyer choose ASA software on FPR1120?
-
Can FPR1120-ASA-K9 be migrated to Threat Defense later?
-
Is FPR1120-ASA-K9 suitable for remote access VPN?
-
When should FPR1120-ASA-K9 be avoided?
-
Is FPR1120-ASA-K9 a better choice than FPR1010-ASA-K9 for fiber handoff?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Hardware looks and feels exactly like a top-tier product should.
Layer23 has set the bar for what we expect from a hardware vendor.
Confidence builders: their reputation, their service, and their product. All solid.
Good B2B partner. Documents were perfect for German customs.
Fast ship? You bet. Made it here in record time.