FPR1140-NGFW-K9 – 3.3G FTD NGFW Firewall – 8xRJ45 4xSFP – 1RU 1140
0/mo Solds
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR1140-NGFW-K9 Description
FPR1140-NGFW-K9 is a Cisco Firepower 1140 NGFW 1RU firewall appliance in the Firepower 1000 Series for Firewall Threat Defense deployments at branch or edge sites. The appliance combines eight RJ-45 data ports, four fixed SFP ports, one 1000BASE-T management port, a 200 GB SATA SSD, integrated AC power, and a fixed internal fan, with Cisco-published Threat Defense performance of 3.3 Gbps FW + AVC + IPS throughput, 3.5 Gbps NGIPS throughput, and 400000 concurrent sessions with AVC.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1140-NGFW-K9 |
|
Product type |
Cisco Firepower 1140 NGFW appliance |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
|
Internal power input |
Integrated single AC input |
|
Fan design |
1 integrated fan |
|
FW + AVC + IPS throughput |
3.3 Gbps |
|
NGIPS throughput |
3.5 Gbps |
|
Concurrent sessions with AVC |
400000 |
Product Performance
Key Features
Cisco ordering guidance identifies FPR1140-NGFW-K9 as the Firepower 1140 1RU appliance ordered for Firewall Threat Defense software with optional subscriptions.
The 1140 Threat Defense row raises throughput, session scale, new-connection rate, IPsec VPN throughput, and maximum VPN peers above the 1120 NGFW model.
The appliance keeps eight Gigabit Ethernet RJ-45 data ports and four fixed SFP ports, so the physical handoff plan stays close to the 1120 while capacity moves to the 1140 row.
Cisco lists Firepower 1140 Threat Defense Malware, Threat, URL, and combined subscription SKUs, with Threat or IPS required before Malware or URL features are used.
The Firepower 1100 hardware guide confirms rack-mount 1RU construction, a management port, console access, one SSD slot, one fixed internal AC power supply, and one fixed fan.
The fixed SFP ports on Firepower 1120, 1140, and 1150 appliances use Cisco-listed SFP part numbers with Threat Defense 6.4 or ASA 9.15 as the documented first supported release baseline.
Application Scenarios
Specify FPR1140-NGFW-K9 when the security design is based on Firewall Threat Defense and the sizing worksheet points to the Cisco 1140 performance row.
Place this SKU in the BOM when the site keeps the eight-copper plus four-SFP fixed-port layout but needs higher Threat Defense throughput, sessions, or VPN-peer capacity than the 1120 provides.
Keep this PID on Threat Defense projects where subscriptions, management mode, and support records should follow the NGFW order path rather than the ASA image path.
Product Comparison
|
Parameter |
FPR1140-NGFW-K9 | |||
|---|---|---|---|---|
|
Cisco PID description |
Firepower 1140 NGFW Appliance, 1RU |
Firepower 1140 NGFW Appliance, 1RU running ASA software |
Firepower 1120 NGFW Appliance, 1RU |
Firepower 1150 NGFW Appliance, 1RU |
|
Firewall model |
Firepower 1140 |
Firepower 1140 |
Firepower 1120 |
Firepower 1150 |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
ASA software with optional security-context license |
Firewall Threat Defense software with optional subscriptions |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack mount |
1RU rack mount |
1RU rack mount |
1RU rack mount |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
8 x RJ-45, 2 x SFP, and 2 x 10G SFP+ |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
|
Threat Defense FW + AVC throughput |
3.3 Gbps |
ASA software role |
2.3 Gbps |
5.3 Gbps |
|
Threat Defense FW + AVC + IPS throughput |
3.3 Gbps |
ASA software role |
2.3 Gbps |
4.9 Gbps |
|
Threat Defense NGIPS throughput |
3.5 Gbps |
ASA software role |
2.6 Gbps |
6.1 Gbps |
|
Threat Defense sessions with AVC |
400000 |
ASA software role |
200000 |
600000 |
|
New connections with AVC |
22000 per second |
ASA software role |
15000 per second |
28000 per second |
|
Threat Defense IPsec VPN throughput |
1.4 Gbps |
ASA software role |
1.2 Gbps |
2.4 Gbps |
|
Maximum VPN peers |
400 |
400 |
150 |
800 |
|
Internal power input |
Integrated single AC input |
Integrated single AC input |
Integrated single AC input |
Integrated single AC input |
- In a FPR1140-NGFW-K9 vs FPR1140-ASA-K9 comparison, the appliance class and fixed-port layout match, but the current SKU follows the Threat Defense order path while the ASA SKU follows ASA software and context licensing.
- The FPR1140-NGFW-K9 difference from FPR1120-NGFW-K9 is the official 1140 Threat Defense sizing row, which raises throughput, sessions with AVC, new connections, IPsec VPN throughput, and maximum VPN peers.
- For FPR1140-NGFW-K9 vs FPR1150-NGFW-K9, the 1150 changes both capacity and fixed interfaces by adding 10G SFP+ ports, while the 1140 keeps four fixed 1G SFP ports.
- Buyers deciding which model to choose should separate ASA versus Threat Defense first, then compare the 1120, 1140, and 1150 by Cisco performance and fixed-interface rows.
Selection Guide
1. Start with the Threat Defense software role
Choose FPR1140-NGFW-K9 when the approved design names Firewall Threat Defense on a Firepower 1140 appliance and requires optional security subscriptions.
2. Use the 1140 row for NGFW capacity
Select this SKU when 3.3 Gbps FW + AVC + IPS throughput, 3.5 Gbps NGIPS throughput, 400000 sessions with AVC, or 400 VPN peers meet the sizing target.
3. Keep ASA orders on the ASA PID
Order FPR1140-ASA-K9 only when the deployment is intentionally based on Cisco ASA software instead of the Threat Defense subscription model.
4. Check the 1150 when the port plan includes 10G
Move to FPR1150-NGFW-K9 when the same Threat Defense role needs the 1150 capacity row or fixed 10G SFP+ interfaces.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Release and manager plan |
Record the planned Threat Defense train and the management path before ordering |
Management compatibility should follow the selected Threat Defense deployment model |
|
Security services |
Map Threat, Malware, URL, or combined service terms to the Firepower 1140 subscription family |
Malware and URL entitlements depend on the Threat or IPS license foundation |
|
Smart Licensing owner |
Associate subscriptions with the correct customer Smart Account |
License ownership errors can delay activation even when the appliance PID is correct |
|
SFP bill of materials |
List the exact Cisco-supported SFP PIDs for all four fixed SFP ports |
The fixed-port optics list is limited to Cisco-documented transceiver options |
|
Rack and power items |
Add the correct country power cord and any rack, cable-management, FIPS, or SSD accessory lines |
The chassis uses fixed internal power and does not add power redundancy through a spare PSU |
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1140T-AMP-1Y |
Cisco Firepower 1140 Threat Defense Malware Protection 1Y subscription |
|
L-FPR1140T-T-1Y |
Cisco Firepower 1140 Threat Defense Threat Protection 1Y subscription |
|
L-FPR1140T-URL-1Y |
Cisco Firepower 1140 Threat Defense URL Filtering 1Y subscription |
|
L-FPR1140T-TMC-1Y |
Cisco Firepower 1140 Threat Defense Threat, Malware, and URL 1Y subscription |
|
FPR1K-CBL-MGMT= |
Cisco Firepower 1K Series cable-management brackets for 1120, 1140, and 1150 appliances |
|
FPR1K-RM-ACY-KIT= |
Cisco Firepower 1K Series accessory kit for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-BRKT= |
Cisco Firepower 1K Series rackmount brackets for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-FIPS-KIT= |
Cisco Firepower 1K Series FIPS kit for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-SSD200= |
Cisco Firepower 1K Series 200 GB SSD for FPR-1120, 1140, and 1150 appliances |
|
GLC-TE |
1000BASE-T SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-SX-MMD |
1000BASE-SX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-LH-SMD |
1000BASE-LX/LH SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-EX-SMD |
1000BASE-EX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-ZX-SMD |
1000BASE-ZX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
FPR1140-NGFW-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Rear Panel LEDs
|
1 |
NetworkStatus of the network ports:Link status (L):Off—No link, or port is not in use.Green—Link established.Green, flashing—Link activity. |
2 |
NetworkStatus of the network ports:Connection-speed status (S):Green, flashing—One flash every three seconds = 10 Mbps.Green, flashing—Two rapid flashes = 100 Mbps.Green, flashing—Three rapid flashes = 1000 Mbps. |
|
3 |
SFPStatus of the SFP transceiver:Link status (L):Off—No SFP.Amber—SFP present, but no link.Green, flashing—Link established and transmitting. |
4 |
PowerPower supply status:Off —Power supply off.Green—Power supply on. |
|
5 |
StatusSystem operating status:Off—System has not booted up yet.Green, flashing quickly—System is booting up.Green—Normal system function.Amber—Critical alarm indicating one or more of the following:Major failure of a hardware or software component.Over-temperature condition.Power voltage outside the tolerance range.Green, flashing slowly (twice in 5 seconds)—Cloud connected.Note Security Cloud Control is valid for FTD 6.7 and later.Green and amber, flashing—Cloud connection failure.Green—Cloud disconnected.Note The Security Cloud Control LED pattern applies to zero-touch provisioning (ZTP). See the Easy Deployment Guide for Cisco Secure Firewall Threat Defense with Cisco Security Cloud Control for more information. |
6 |
ActiveStatus of the failover pair:Off— Failover is not operational.Green—Failover pair operating normally. The LED is green always unless the chassis in a high availability pair.Amber—When the chassis is in a high availability pair, the LED is amber for the standby unit.Note For Active-Active cases with multi-context enabled, since there will be multiple groups with Active and Standby units, any unit can be in the Active or Standby state in each group, thus the LED behavior is not deterministic. Therefore, you must ignore the LED status for Active-Active cases. |
|
7 |
SSDStatus of the SSD:Off— No SSD present.Green—SSD detected.Green, flashing—Activity on the SSD.Note See Replace the SSD for the procedure for replacing a failed SSD. |
— |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1140-NGFW-K9 | Product Type | Cisco Firepower 1140 NGFW appliance |
| Firewall Model | Firepower 1140 | Security Software Role | Firewall Threat Defense software with optional subscriptions |
| Form Factor | 1RU rack mount | Fixed RJ-45 Ports | 8 x Gigabit Ethernet RJ-45 10/100/1000BASE-T |
| Fixed SFP Ports | 4 x fixed 1-Gbps SFP ports | Management Port | 1 x 1000BASE-T management port |
| Console Interfaces | RJ-45 serial console and USB Mini B serial console | USB Port | 1 x USB 3.0 Type-A |
| Storage | 1 x 200 GB 2.5-in SATA SSD | Airflow | I/O side to non-I/O side |
| Fan Modules | 1 fixed internal fan | Power Supply | 1 fixed internal AC power supply |
| Power Redundancy | No redundant power supply option listed | AC Input Voltage | 100 to 240V AC |
| AC Frequency | 50 to 60 Hz | AC Maximum Power Draw | 100 W |
| AC Maximum Current Draw | Less than 2 A at 100V; less than 1 A at 240V | Rack Mounting | 2-post mounting brackets included |
| Weight | 8 lb (3.63 kg) | Operating Temperature | 32 to 104F (0 to 40C) |
| Operating Humidity | 90% noncondensing | Operating Altitude | 9843 ft (3000 m) maximum |
| Fixed SFP Release Baseline | Threat Defense 6.4 or ASA 9.15 for listed SFPs | Supported Fixed SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| Cisco Device Manager | Local management supported | Centralized Management | Firewall Management Center or Cisco Defense Orchestrator |
| AVC Support | Standard | FW + AVC Throughput | 3.3 Gbps |
| FW + AVC + IPS Throughput | 3.3 Gbps | NGIPS Throughput | 3.5 Gbps |
| TLS Throughput | 1.2 Gbps | Concurrent Sessions with AVC | 400000 |
| New Connections with AVC | 22000 per second | IPsec VPN Throughput | 1.4 Gbps |
| Maximum VPN Peers | 400 |
Get More Information
Need pricing, stock, or shipping details for the FPR1140-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What is Cisco FPR1140-NGFW-K9 best for?
-
How does FPR1140-NGFW-K9 differ from FPR1120-NGFW-K9?
-
What interfaces does FPR1140-NGFW-K9 provide?
-
Is FPR1140-NGFW-K9 a rackmount firewall?
-
Does FPR1140-NGFW-K9 support Threat, Malware, and URL services?
-
When should I choose FPR1150-NGFW-K9 over FPR1140-NGFW-K9?
-
Can FPR1140-NGFW-K9 be used for internet edge security?
-
What buying mistake happens with FPR1140-NGFW-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Our IT procurement is competitive. Layer23 wins the business because they deliver.
Cost-conscious procurement department finally has a vendor they like.
Product was in pristine condition on arrival.
It belongs in a rack! And it got here safely. Good work.
Reliable vendor for our critical infrastructure needs.