FPR1120-NGFW-K9 – 2.3G FTD NGFW Firewall – 8xRJ45 4xSFP – 1RU 1120
0/mo Solds
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR1120-NGFW-K9 Description
FPR1120-NGFW-K9 is a Cisco Firepower 1120 NGFW firewall appliance in the Firepower 1000 Series for branch, internet-edge, or small-site Threat Defense deployments. This 1RU platform combines eight RJ-45 data ports, four fixed SFP ports, a dedicated 1000BASE-T management interface, 200 GB SSD storage, and an integrated single AC power input, with Cisco-listed performance of 2.3 Gbps FW + AVC + IPS throughput, 2.6 Gbps NGIPS throughput, 850 Mbps TLS throughput, 1.2 Gbps IPsec VPN throughput, and support for local Cisco Device Manager or centralized management through Firewall Management Center or Cisco Defense Orchestrator.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1120-NGFW-K9 |
|
Product type |
Cisco Firepower 1120 NGFW appliance |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB SSD |
|
Internal power input |
Integrated single AC input |
|
Fan design |
1 integrated fan |
|
FW + AVC + IPS throughput |
2.3 Gbps |
|
NGIPS throughput |
2.6 Gbps |
|
Concurrent sessions with AVC |
200000 |
Product Performance
Key Features
Cisco ordering guidance lists FPR1120-NGFW-K9 as the Firepower 1120 appliance PID that runs Firewall Threat Defense software with optional subscriptions.
The 1120 platform combines eight 1000BASE-T data interfaces, four fixed SFP ports, a 1000BASE-T management port, and local console access in a rack-mount Firepower 1100 chassis.
The current SKU uses the Cisco 1120 Threat Defense performance row, including 2.3 Gbps FW + AVC + IPS throughput, 2.6 Gbps NGIPS throughput, and 200000 sessions with AVC.
FPR1120-NGFW-K9 should not be interchanged with FPR1120-ASA-K9 unless the approved design changes from Threat Defense subscriptions to ASA software and licensing.
Cisco lists supported 1G fixed-port SFPs for the Firepower 1120, 1140, and 1150 fixed SFP ports, with Threat Defense 6.4 or ASA 9.15 as the first supported release baseline.
The Firepower 1120 hardware uses an integrated single AC input and one integrated fan, so redundancy and replacement planning should be handled before the firewall is added to the BOM.
Application Scenarios
Choose FPR1120-NGFW-K9 when the approved security design names Firewall Threat Defense on a Firepower 1120 appliance and the sizing worksheet maps to the 1120 performance row.
Use this SKU when the site needs eight RJ-45 firewall interfaces plus fixed SFP uplinks or service-provider handoffs that match Cisco-supported 1G transceiver options.
Order this NGFW PID when subscriptions, management, and support records must identify Threat Defense; keep FPR1120-ASA-K9 for ASA software orders.
Product Comparison
|
Parameter |
FPR1120-NGFW-K9 | ||
|---|---|---|---|
|
Cisco PID description |
Firepower 1120 NGFW Appliance, 1RU |
Firepower 1120 NGFW Appliance, 1RU |
Firepower 1140 NGFW Appliance, 1RU |
|
Firewall model |
Firepower 1120 |
Firepower 1120 |
Firepower 1140 |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
ASA software with optional security-context license |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack mount |
1RU rack mount |
1RU rack mount |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
|
Storage |
1 x 200 GB SSD |
1 x 200 GB SSD |
1 x 200 GB SSD |
|
Threat Defense FW + AVC + IPS throughput |
2.3 Gbps |
Not a Threat Defense SKU |
3.3 Gbps |
|
Threat Defense NGIPS throughput |
2.6 Gbps |
Not a Threat Defense SKU |
3.5 Gbps |
|
Threat Defense sessions with AVC |
200000 |
Not a Threat Defense SKU |
400000 |
|
Threat Defense IPsec VPN throughput |
1.2 Gbps |
Not a Threat Defense SKU |
1.4 Gbps |
|
Maximum VPN peers |
150 |
150 |
400 |
|
Internal power input |
Integrated single AC input |
Integrated single AC input |
Integrated single AC input |
- In a FPR1120-NGFW-K9 vs FPR1120-ASA-K9 comparison, the appliance model and fixed interface layout match, but the current SKU is the Threat Defense order path and the ASA SKU is the ASA software order path.
- The FPR1120-NGFW-K9 difference from FPR1140-NGFW-K9 is the Cisco 1120 sizing row: the 1140 raises FW + AVC + IPS throughput, NGIPS throughput, session scale, IPsec VPN throughput, and maximum VPN peers.
- For buyers comparing FPR1120-NGFW-K9 vs FPR1120-ASA-K9 vs FPR1140-NGFW-K9, which model to choose should be decided by software role first and then by the official Firepower 1000 performance row.
Selection Guide
1. Confirm the Threat Defense role
Choose FPR1120-NGFW-K9 when the BOM requires a Firepower 1120 appliance running Firewall Threat Defense software with optional security subscriptions.
2. Keep ASA orders on the ASA PID
Select FPR1120-ASA-K9 only when the design specifically calls for ASA software and ASA licensing instead of the Threat Defense subscription model.
3. Size against the 1120 performance row
Use this SKU when 2.3 Gbps FW + AVC + IPS throughput, 2.6 Gbps NGIPS throughput, and 200000 sessions with AVC fit the firewall sizing target.
4. Compare the 1140 for higher capacity
Move to FPR1140-NGFW-K9 when the same Threat Defense role is required but the deployment needs the higher Cisco 1140 throughput, session, or VPN-peer values.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Exact appliance PID |
Confirm FPR1120-NGFW-K9 rather than FPR1120-ASA-K9 |
Cisco lists separate 1120 order paths for Threat Defense and ASA software |
|
Threat Defense release |
Verify the target Threat Defense release and management mode |
Firepower hardware support is tied to the release and manager compatibility matrix |
|
Security subscriptions |
Choose Malware Protection, Threat Protection, URL Filtering, or a combined subscription term |
The appliance PID does not replace the required subscription decision |
|
Fixed-port media |
Match SFP optics to Cisco-supported fixed-port transceiver PIDs |
Unsupported optics can create installation and support risk |
|
Power design |
Confirm the site accepts integrated single AC input with no redundant supply option listed |
Power redundancy cannot be added through a second field-replaceable PSU |
|
Rack and accessory plan |
Confirm rack brackets, cable-management brackets, FIPS kit, or spare SSD needs |
Accessories are separate orderable items in Cisco ordering guidance |
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1120T-AMP-1Y |
Cisco Firepower 1120 Threat Defense Malware Protection 1Y subscription |
|
L-FPR1120T-T-1Y |
Cisco Firepower 1120 Threat Defense Threat Protection 1Y subscription |
|
L-FPR1120T-URL-1Y |
Cisco Firepower 1120 Threat Defense URL Filtering 1Y subscription |
|
L-FPR1120T-TMC-1Y |
Cisco Firepower 1120 Threat Defense Threat, Malware, and URL 1Y subscription |
|
FPR1K-CBL-MGMT= |
Cisco Firepower 1K Series cable-management brackets for 1120, 1140, and 1150 |
|
FPR1K-RM-ACY-KIT= |
Cisco Firepower 1K Series accessory kit for FPR-1120, 1140, and 1150 |
|
FPR1K-RM-BRKT= |
Cisco Firepower 1K Series rackmount brackets for FPR-1120, 1140, and 1150 |
|
FPR1K-RM-FIPS-KIT= |
Cisco Firepower 1K Series FIPS kit for FPR-1120, 1140, and 1150 |
|
FPR1K-RM-SSD200= |
Cisco Firepower 1K Series 200 GB SSD for FPR-1120, 1140, and 1150 |
|
GLC-TE |
1000BASE-T SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-SX-MMD |
1000BASE-SX SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-LH-SMD |
1000BASE-LX/LH SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-EX-SMD |
1000BASE-EX SFP transceiver listed for Firepower 1120 fixed SFP ports |
|
GLC-ZX-SMD |
1000BASE-ZX SFP transceiver listed for Firepower 1120 fixed SFP ports |
FPR1120-NGFW-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1120-NGFW-K9 | Product Type | Cisco Firepower 1120 NGFW appliance |
| Firewall Model | Firepower 1120 | Security Software Role | Firewall Threat Defense software with optional subscriptions |
| Form Factor | 1RU rack mount | Fixed RJ-45 Ports | 8 x 10/100/1000BASE-T data interfaces |
| Fixed SFP Ports | 4 x fixed SFP ports | Management Port | 1 x 1000BASE-T management port |
| Console Interfaces | RJ-45 serial console and USB Mini B serial console | USB Port | 1 x USB 3.0 Type-A |
| Storage | 1 x 200 GB SSD | Airflow | I/O side to non-I/O side |
| Fan Modules | 1 integrated fan | Power Supply Configuration | Integrated single AC input |
| Redundant Power | No redundant power supply option listed | AC Input Voltage | 100 to 240V AC |
| AC Frequency | 50 to 60 Hz | AC Maximum Power Draw | 100 W |
| AC Maximum Current Draw | Less than 2A at 100V; less than 1A at 240V | Rack Mounting | 2-post mounting brackets included |
| Weight | 8 lb (3.6 kg) | Operating Temperature | 32 to 104F (0 to 40C) |
| Operating Humidity | 90% noncondensing | Operating Altitude | 9843 ft (3000 m) maximum |
| Fixed SFP Release Baseline | Threat Defense 6.4 or ASA 9.15 for listed fixed-port SFPs | Supported Fixed SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| Cisco Device Manager | Local management supported | Centralized Management | Firewall Management Center or Cisco Defense Orchestrator |
| AVC Support | Standard | FW + AVC Throughput | 2.3 Gbps |
| FW + AVC + IPS Throughput | 2.3 Gbps | NGIPS Throughput | 2.6 Gbps |
| TLS Throughput | 850 Mbps | Concurrent Sessions with AVC | 200000 |
| New Connections with AVC | 15000 per second | IPsec VPN Throughput | 1.2 Gbps |
| Maximum VPN Peers | 150 |
Get More Information
Need pricing, stock, or shipping details for the FPR1120-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What is Cisco FPR1120-NGFW-K9 designed for?
-
How is FPR1120-NGFW-K9 different from FPR1010-NGFW-K9?
-
What ports are available on FPR1120-NGFW-K9?
-
Is FPR1120-NGFW-K9 good for inspected traffic?
-
What is the difference between FPR1120-NGFW-K9 and FPR1120-ASA-K9?
-
Can FPR1120-NGFW-K9 be centrally managed?
-
When should I choose FPR1140-NGFW-K9 instead of FPR1120-NGFW-K9?
-
Does FPR1120-NGFW-K9 include URL filtering by default?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
We’ve made Layer23 part of our standard procurement process.
Documentation included matches what we’d expect from a sealed retail unit.
Express shipping option was available and reasonably priced.
Honest and reliable. The equipment is authentic.
Arrived in perfect condition. Ready for deployment.