FPR1140-ASA-K9 – 6G ASA Firewall – 8xRJ45 4xSFP – 1RU 1140
1/mo Solds
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR1140-ASA-K9 Description
FPR1140-ASA-K9 is a Cisco Firepower 1140 ASA firewall appliance in the Firepower 1000 Series for branch, internet-edge, or rack-mounted security deployments that need an ASA-based firewall platform. The 1RU appliance combines eight RJ-45 data ports, four fixed SFP ports, a dedicated 1000BASE-T management port, and a 200 GB SATA SSD, with Cisco-confirmed ASA performance including 6 Gbps stateful inspection firewall throughput, 3.5 Gbps multiprotocol firewall throughput, 400000 concurrent firewall connections, 1.2 Gbps IPsec VPN throughput, and support for up to 400 VPN peers.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1140-ASA-K9 |
|
Product type |
Cisco Firepower 1140 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
|
Internal power input |
Single fixed internal AC power supply |
|
Fan design |
1 fixed fan |
|
Stateful inspection firewall throughput |
6 Gbps |
|
ASA multiprotocol firewall throughput |
3.5 Gbps |
|
Concurrent firewall connections |
400000 |
Product Performance
Key Features
Cisco ordering guidance identifies FPR1140-ASA-K9 as the Firepower 1140 1RU appliance orderable for ASA software with optional security-context licensing.
The appliance provides eight RJ-45 data interfaces, four fixed SFP interfaces, one Gigabit management port, console access, internal SSD storage, and rack-mount hardware in the Firepower 1100 chassis family.
The 1140 ASA row increases stateful throughput, multiprotocol throughput, concurrent connections, new connections per second, IPsec VPN throughput, and maximum VPN peers compared with the 1120 ASA row.
Cisco ASA guidance lists Essentials as required and security-context licenses as additive, so the appliance PID should be paired with the correct Smart Account and license quantities.
The Firepower 1140 uses one fixed internal AC power supply and one fixed fan; neither is a field-replaceable module, and Cisco does not list redundant power for this chassis.
The fixed SFP ports on Firepower 1120, 1140, and 1150 appliances have Cisco-listed SFP options with Threat Defense 6.4 or ASA 9.15 as the first supported release baseline for those optics.
Application Scenarios
Specify FPR1140-ASA-K9 when the security standard remains Cisco ASA and the sizing worksheet calls for the 1140 ASA performance row rather than the 1120 model.
Use this SKU when the site needs built-in copper firewall interfaces plus Cisco-supported 1G SFP ports for upstream, transit, or service-provider links.
Keep FPR1140-ASA-K9 on the quote when operations, migration timing, and licensing are based on ASA software; use FPR1140-NGFW-K9 only when the approved design changes to Threat Defense subscriptions.
Product Comparison
|
Parameter |
FPR1140-ASA-K9 | |||
|---|---|---|---|---|
|
Cisco PID description |
Firepower 1140 1RU appliance running ASA software |
Firepower 1140 1RU appliance running Threat Defense software |
Firepower 1120 1RU appliance running ASA software |
Firepower 1150 1RU appliance running ASA software |
|
Firewall model |
Firepower 1140 |
Firepower 1140 |
Firepower 1120 |
Firepower 1150 |
|
Security software role |
Cisco ASA software |
Firewall Threat Defense software with optional subscriptions |
Cisco ASA software |
Cisco ASA software |
|
Form factor |
1RU rack mount |
1RU rack mount |
1RU rack mount |
1RU rack mount |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
8 x RJ-45, 2 x SFP, and 2 x SFP+ |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
|
ASA stateful inspection throughput |
6 Gbps |
Threat Defense software role |
4.5 Gbps |
7.5 Gbps |
|
ASA multiprotocol throughput |
3.5 Gbps |
Threat Defense software role |
2.5 Gbps |
4.5 Gbps |
|
Concurrent firewall connections |
400000 |
Threat Defense software role |
200000 |
600000 |
|
New connections per second |
100000 |
Threat Defense software role |
75000 |
150000 |
|
IPsec VPN throughput |
1.2 Gbps |
Threat Defense software role |
1 Gbps |
1.7 Gbps |
|
Maximum VPN peers |
400 |
400 |
150 |
800 |
|
Security contexts |
2 included; 5 maximum |
Threat Defense software role |
2 included; 5 maximum |
2 included; 25 maximum |
|
Internal power input |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
- In a FPR1140-ASA-K9 vs FPR1140-NGFW-K9 comparison, the Firepower 1140 hardware class matches, but the current SKU is the ASA order path while the NGFW PID is tied to Threat Defense software and subscriptions.
- The FPR1140-ASA-K9 difference from FPR1120-ASA-K9 is the official ASA capacity row: the 1140 raises firewall throughput, connection scale, new-connection rate, IPsec VPN throughput, and maximum VPN peers.
- For FPR1140-ASA-K9 vs FPR1150-ASA-K9, the comparison turns on ASA scale and fixed-port layout; the 1150 adds higher ASA values and replaces two of the 1G SFP ports with two 10G SFP+ ports.
- Buyers deciding which model to choose should keep ASA and Threat Defense PIDs separate first, then size among 1120, 1140, and 1150 by the Cisco performance and port rows.
Selection Guide
1. Keep the ASA software requirement explicit
Select FPR1140-ASA-K9 when the approved design calls for a Firepower 1140 appliance running Cisco ASA software, not Threat Defense subscriptions.
2. Use the 1140 row when the 1120 is undersized
Choose this SKU when the deployment needs 6 Gbps stateful inspection throughput, 3.5 Gbps multiprotocol throughput, 400000 concurrent firewall connections, or 400 maximum VPN peers.
3. Move to the NGFW PID only for a software-role change
Order FPR1140-NGFW-K9 only when the design, subscriptions, and management plan shift to Firewall Threat Defense on the 1140 appliance.
4. Check the 1150 when 10G fixed ports are required
Use FPR1150-ASA-K9 instead when the ASA design needs the 1150 performance row or the fixed-port plan requires SFP+ interfaces.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Exact appliance PID |
Confirm FPR1140-ASA-K9 rather than FPR1140-NGFW-K9 |
Cisco separates ASA and Threat Defense orderable roles for the Firepower 1140 |
|
ASA license plan |
Include the ASA Essentials license and any required security-context license |
Cisco ASA guidance lists Essentials as required and context licenses as additive |
|
Security-context count |
Confirm whether the included contexts are enough for the deployment |
The Firepower 1140 ASA row lists 2 included contexts and a 5-context maximum |
|
Fixed-port media |
Match the four fixed SFP ports to Cisco-listed SFP part numbers and the ASA release baseline |
Unsupported optics can create installation and support risk |
|
Power and rack readiness |
Confirm the fixed internal AC power design, country power cord, and rack installation accessories |
The chassis has no redundant power supply option and uses fixed internal power and fan components |
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1000-ASA= |
Cisco Firepower 1000 Series ASA Essentials license |
|
L-FPR1K-ASASC-5= |
Cisco Firepower 1000 Series add-on 5 security context license |
|
L-FPR1K-ENC-K9= |
Cisco Firepower 1K Series ASA strong encryption license |
|
FPR1K-CBL-MGMT= |
Cable-management brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-ACY-KIT= |
Accessory kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-BRKT= |
Rackmount brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-FIPS-KIT= |
FIPS kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-SSD200= |
200 GB SSD for Firepower 1120, 1140, and 1150 appliances |
|
GLC-TE |
1000BASE-T SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-SX-MMD |
1000BASE-SX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-LH-SMD |
1000BASE-LX/LH SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-EX-SMD |
1000BASE-EX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-ZX-SMD |
1000BASE-ZX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
FPR1140-ASA-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Rear Panel LEDs
|
1 |
NetworkStatus of the network ports:Link status (L):Off—No link, or port is not in use.Green—Link established.Green, flashing—Link activity. |
2 |
NetworkStatus of the network ports:Connection-speed status (S):Green, flashing—One flash every three seconds = 10 Mbps.Green, flashing—Two rapid flashes = 100 Mbps.Green, flashing—Three rapid flashes = 1000 Mbps. |
|
3 |
SFPStatus of the SFP transceiver:Link status (L):Off—No SFP.Amber—SFP present, but no link.Green, flashing—Link established and transmitting. |
4 |
PowerPower supply status:Off —Power supply off.Green—Power supply on. |
|
5 |
StatusSystem operating status:Off—System has not booted up yet.Green, flashing quickly—System is booting up.Green—Normal system function.Amber—Critical alarm indicating one or more of the following:Major failure of a hardware or software component.Over-temperature condition.Power voltage outside the tolerance range.Green, flashing slowly (twice in 5 seconds)—Cloud connected.Note Security Cloud Control is valid for FTD 6.7 and later.Green and amber, flashing—Cloud connection failure.Green—Cloud disconnected.Note The Security Cloud Control LED pattern applies to zero-touch provisioning (ZTP). See the Easy Deployment Guide for Cisco Secure Firewall Threat Defense with Cisco Security Cloud Control for more information. |
6 |
ActiveStatus of the failover pair:Off— Failover is not operational.Green—Failover pair operating normally. The LED is green always unless the chassis in a high availability pair.Amber—When the chassis is in a high availability pair, the LED is amber for the standby unit.Note For Active-Active cases with multi-context enabled, since there will be multiple groups with Active and Standby units, any unit can be in the Active or Standby state in each group, thus the LED behavior is not deterministic. Therefore, you must ignore the LED status for Active-Active cases. |
|
7 |
SSDStatus of the SSD:Off— No SSD present.Green—SSD detected.Green, flashing—Activity on the SSD.Note See Replace the SSD for the procedure for replacing a failed SSD. |
— |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1140-ASA-K9 | Product Type | Cisco Firepower 1140 ASA firewall appliance |
| Firewall Model | Firepower 1140 | Security Software Role | Cisco ASA software |
| Form Factor | 1RU rack mount | Fixed RJ-45 Ports | 8 x RJ-45 |
| Fixed SFP Ports | 4 x SFP | Management Port | 1 x 1000BASE-T management port |
| Console Interfaces | RJ-45 serial console and USB Mini B serial console | USB Port | 1 x USB 3.0 Type-A |
| Storage | 1 x 200 GB 2.5-in SATA SSD | Airflow | I/O side to non-I/O side |
| Fan Modules | 1 fixed fan | Power Supply | 1 fixed internal AC power supply |
| Power Redundancy | No redundant power supply option listed | AC Input Voltage | 100 to 240V AC |
| AC Frequency | 50 to 60 Hz | AC Maximum Power Draw | 100 W |
| AC Maximum Current Draw | Less than 2 A at 100V; less than 1 A at 240V | Rack Mounting | 2-post mounting brackets included |
| Weight | 8 lb (3.6 kg) | Operating Temperature | 32 to 104F (0 to 40C) |
| Operating Humidity | 90% noncondensing | Operating Altitude | 9843 ft (3000 m) maximum |
| Fixed SFP Release Baseline | Threat Defense 6.4 or ASA 9.15 for listed SFPs | Supported Fixed SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| High Availability | Active/active and active/standby | Stateful Inspection Firewall Throughput | 6 Gbps |
| Multiprotocol Firewall Throughput | 3.5 Gbps | Concurrent Firewall Connections | 400000 |
| New Connections Per Second | 100000 | IPsec VPN Throughput | 1.2 Gbps |
| Maximum VPN Peers | 400 | Security Contexts | 2 included; 5 maximum |
| Local ASA Management | Adaptive Security Device Manager | ASA Centralized Management | Cisco Security Manager or Cisco Defense Orchestrator |
| Required ASA License | Essentials license L-FPR1000-ASA= |
Get More Information
Need pricing, stock, or shipping details for the FPR1140-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What role fits FPR1140-ASA-K9 in an ASA deployment?
-
How is FPR1140-ASA-K9 different from FPR1150-ASA-K9?
-
Which ASA throughput number matters for FPR1140-ASA-K9?
-
How many VPN peers can FPR1140-ASA-K9 support?
-
Can FPR1140-ASA-K9 replace an ASA 5525-X or ASA 5516-X?
-
Does FPR1140-ASA-K9 run ASA software instead of FTD?
-
What high availability design fits FPR1140-ASA-K9?
-
Why do licensing questions appear around FPR1140-ASA-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Confidence in this purchase grew with every step of the process.
We track failure rates across all vendors. Layer23 products have a zero defect rate for us.
We’ve used Layer23 for years now and the relationship just keeps improving.
You can trust this source. They deliver what they promise.
Service was impeccable. Delivered with discretion and speed.