FPR1120-NGFW-K9 – 2.3G FTD NGFW Firewall – 8xRJ45 4xSFP – 1RU 1120
Shop Expert-Recommended Accessories for the FPR1120-NGFW-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR1120-NGFW-K9 Description
The FPR1120-NGFW-K9 is a Cisco Firepower 1120 1RU firewall appliance running Cisco Secure Firewall Threat Defense software for branch and internet-edge sites. The appliance has eight 1000BASE-T ports and four SFP ports, and it delivers 2.3 Gbps of firewall throughput with AVC and IPS, 2.6 Gbps of NGIPS throughput, 200,000 concurrent sessions with AVC and 150 VPN peers. Threat, malware and URL filtering are optional subscriptions that attach only to a Threat Defense chassis.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1120-NGFW-K9 |
|
Product type |
Cisco Firepower 1120 NGFW appliance |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB SSD |
|
Internal power input |
Integrated single AC input |
|
Fan design |
1 integrated fan |
|
FW + AVC + IPS throughput |
2.3 Gbps |
|
NGIPS throughput |
2.6 Gbps |
|
Concurrent sessions with AVC |
200000 |
Product Performance
Key Features
Firewall throughput is 2.3 Gbps with AVC and also with AVC plus IPS, measured with 1024B packets. NGIPS throughput is 2.6 Gbps and TLS throughput is 850 Mbps.
The appliance holds up to 200,000 concurrent sessions with AVC and sets up 15,000 new connections per second under the same inspection. A site with many short-lived connections should size against the connection rate as well as the session count.
IPsec VPN throughput is 1.2 Gbps with 1024B TCP traffic and Fastpath. Site-to-site and remote-access peers share a limit of 150.
The chassis pairs eight 1000BASE-T ports with four fixed SFP ports. GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD and GLC-ZX-SMD are the supported 1G optics.
Threat, Malware, URL and combined subscriptions attach to this chassis in 1-, 3- or 5-year terms. Without one, the firewall runs access control and VPN but not subscription-based threat inspection.
The power supply is integrated with a single AC input, drawing up to 100W, and the chassis has one fan rated at 31.7 dBA at 25C. Power redundancy therefore comes from a second chassis rather than a second supply.
Application Scenarios
At a branch office, the appliance inspects internet traffic with application visibility and intrusion prevention and terminates site-to-site VPN tunnels back to headquarters.
In a small communications room, the eight RJ-45 ports connect inside and DMZ segments while an SFP port carries the service-provider handoff or an upstream link.
A distributed retail or clinic network can manage many of these firewalls from Firewall Management Center or Cisco Defense Orchestrator, with Cisco Device Manager available for local changes.
Product Comparison
|
Parameter |
FPR1120-NGFW-K9 | ||
|---|---|---|---|
|
Throughput: FW + AVC + IPS (1024B) |
2.3 Gbps |
N/A for ASA |
3.3 Gbps |
|
Throughput: NGIPS (1024B) |
2.6 Gbps |
N/A for ASA |
3.5 Gbps |
|
Stateful inspection firewall throughput |
N/A for Threat Defense |
4.5 Gbps (1500B UDP) |
N/A for Threat Defense |
|
IPsec VPN throughput |
1.2 Gbps (1024B TCP with Fastpath) |
1 Gbps (450B UDP L2L test) |
1.4 Gbps (1024B TCP with Fastpath) |
|
Maximum concurrent sessions with AVC |
200K |
N/A for ASA |
400K |
|
Maximum VPN peers |
150 |
150 |
400 |
|
Security contexts (included; maximum) |
N/A for Threat Defense |
2; 5 |
N/A for Threat Defense |
|
Network interfaces |
8 x 1000BASE-T, 4 x SFP |
8 x 1000BASE-T, 4 x SFP |
8 x 1000BASE-T, 4 x SFP |
|
Power supply configuration |
Integrated, single AC input |
Integrated, single AC input |
Integrated, single AC input |
FPR1120-NGFW-K9 and FPR1120-ASA-K9 are the same 1RU chassis with 8 x RJ-45 and 4 x SFP ports, but only FPR1120-NGFW-K9 runs Firewall Threat Defense and accepts threat defense subscriptions, while FPR1120-ASA-K9 runs ASA at 4.5 Gbps stateful inspection with 2 included security contexts, so ASA-only features mean ordering that SKU. Where 2.3 Gbps FW + AVC + IPS, 200,000 sessions or 150 VPN peers falls short, FPR1140-NGFW-K9 raises them to 3.3 Gbps, 400,000 sessions and 400 peers, with 1.4 Gbps IPsec VPN against 1.2 Gbps.
Ordering Checklist
- Threat Defense subscription: Pick a subscription type (Threat, Threat and Malware, Threat and URL, Threat Malware and URL, URL or Malware) and a 1-, 3- or 5-year term. Subscriptions attach only to a chassis running Firewall Threat Defense, so FPR1120-NGFW-K9 has no threat inspection subscription until one is ordered.
- Smart Licensing account: Make sure a Smart Software Manager account exists, or have the partner create one, before the Threat Defense order is placed. All ordered licenses are deposited into that account.
- Secure Client licensing: Add a Cisco Secure Client license when Remote Access VPN will be used. Remote Access VPN on a Threat Defense firewall requires the Secure Client license.
- Accessory kits: Add FPR1K-RM-FIPS-KIT=, FPR1K-RM-ACY-KIT= and FPR1K-CBL-MGMT=, which are separate spare PIDs for the 1120, 1140 and 1150 appliances. Kits not on the order have to be bought later as spares.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1120T-AMP-1Y |
Cisco Firepower 1120 Threat Defense Malware Protection 1Y subscription |
|
L-FPR1120T-T-1Y |
Cisco Firepower 1120 Threat Defense Threat Protection 1Y subscription |
|
L-FPR1120T-URL-1Y |
Cisco Firepower 1120 Threat Defense URL Filtering 1Y subscription |
|
L-FPR1120T-TMC-1Y |
Cisco Firepower 1120 Threat Defense Threat, Malware, and URL 1Y subscription |
|
FPR1K-CBL-MGMT= |
Cisco Firepower 1K Series cable-management brackets for 1120, 1140, and 1150 |
|
FPR1K-RM-ACY-KIT= |
Cisco Firepower 1K Series accessory kit for FPR-1120, 1140, and 1150 |
|
FPR1K-RM-BRKT= |
Cisco Firepower 1K Series rackmount brackets for FPR-1120, 1140, and 1150 |
|
FPR1K-RM-FIPS-KIT= |
Cisco Firepower 1K Series FIPS kit for FPR-1120, 1140, and 1150 |
|
FPR1K-RM-SSD200= |
Cisco Firepower 1K Series 200 GB SSD for FPR-1120, 1140, and 1150 |
|
1000BASE-T SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-SX SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-LX/LH SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-EX SFP transceiver listed for Firepower 1120 fixed SFP ports | |
|
1000BASE-ZX SFP transceiver listed for Firepower 1120 fixed SFP ports |
FPR1120-NGFW-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1120-NGFW-K9 | Product type | Cisco Firepower 1120 NGFW appliance |
| Firewall model | Firepower 1120 | Security software role | Firewall Threat Defense software with optional subscriptions |
| Rack units | 1RU rack mount | Fixed RJ-45 ports | 8 x 10/100/1000BASE-T data interfaces |
| Fixed SFP ports | 4 x fixed SFP ports | Management port | 1 x 1000BASE-T management port |
| Console port | RJ-45 serial console and USB Mini B serial console | USB port | 1 x USB 3.0 Type-A |
| SSD storage | 1 x 200 GB SSD | Airflow | I/O side to non-I/O side |
| Fan modules | 1 integrated fan | Power supply configuration | Integrated single AC input |
| Redundant power | No redundant power supply option listed | AC input voltage | 100 to 240V AC |
| AC input frequency | 50 to 60 Hz | AC maximum power draw | 100 W |
| AC maximum current draw | Less than 2A at 100V; less than 1A at 240V | Mounting | 2-post mounting brackets included |
| Weight | 3.6 kg (8 lb) | Operating temperature | 32 to 104F (0 to 40C) |
| Operating humidity | 90% noncondensing | Operating altitude | 9843 ft (3000 m) maximum |
| Fixed SFP release baseline | Threat Defense 6.4 or ASA 9.15 for listed fixed-port SFPs | Supported fixed SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| Cisco device manager | Local management supported | Centralized management | Firewall Management Center or Cisco Defense Orchestrator |
| AVC support | Standard | FW + AVC throughput | 2.3 Gbps |
| FW + AVC + IPS throughput | 2.3 Gbps | NGIPS throughput | 2.6 Gbps |
| TLS throughput | 850 Mbps | Concurrent sessions with AVC | 200000 |
| New connections with AVC | 15000 per second | IPsec VPN throughput | 1.2 Gbps |
| Maximum VPN peers | 150 |
Get More Information
Need pricing, stock, or shipping details for the FPR1120-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
How much memory does FPR1120-NGFW-K9 have?
-
Which rack standard does FPR1120-NGFW-K9 follow?
-
What AC input range does FPR1120-NGFW-K9 accept?
-
How heavy is FPR1120-NGFW-K9 and which way does air flow?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
We’ve made Layer23 part of our standard procurement process.
Documentation included matches what we’d expect from a sealed retail unit.
Express shipping option was available and reasonably priced.
Honest and reliable. The equipment is authentic.
Arrived in perfect condition. Ready for deployment.