FPR1140-NGFW-K9 – 3.3G FTD NGFW Firewall – 8xRJ45 4xSFP – 1RU 1140
Shop Expert-Recommended Accessories for the FPR1140-NGFW-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR1140-NGFW-K9 Description
The FPR1140-NGFW-K9 is a Cisco Firepower 1000 Series 1RU firewall appliance running Firewall Threat Defense software for branch and internet-edge sites. The appliance has eight RJ-45 and four SFP fixed ports, 3.3 Gbps of FW + AVC + IPS throughput, 3.5 Gbps of NGIPS throughput and 400000 concurrent sessions with AVC. The chassis has a single fixed AC supply with no redundant option, and its Malware, Threat and URL subscriptions apply only to Threat Defense software.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1140-NGFW-K9 |
|
Product type |
Cisco Firepower 1140 NGFW appliance |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45 and 4 x SFP |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
|
Internal power input |
Integrated single AC input |
|
Fan design |
1 integrated fan |
|
FW + AVC + IPS throughput |
3.3 Gbps |
|
NGIPS throughput |
3.5 Gbps |
|
Concurrent sessions with AVC |
400000 |
Product Performance
Key Features
With firewall, AVC and IPS measured together the appliance is rated 3.3 Gbps, alongside 400000 concurrent sessions with AVC. That is the figure to size against when IPS stays on.
Eight RJ-45 ports serve LAN segments, and four fixed SFP ports take fiber or copper SFP uplinks from Cisco’s supported list. The fixed ports are 1G only, with no SFP+ position.
One integrated AC supply with a 100W maximum draw and one fixed fan power the chassis. No redundant power option exists, so power redundancy has to come from the site rather than the appliance.
Application Scenarios
A branch office with an internet circuit can place the appliance at the edge, with RJ-45 ports facing the LAN and SFP ports facing the provider handoff, and run firewall, AVC and IPS inspection on the traffic that crosses it.
A regional site that terminates employee remote-access and site-to-site tunnels can use the appliance’s 1.4 Gbps of IPsec VPN throughput and 400 VPN peers.
An office network that separates staff, guest and server segments can assign the eight RJ-45 ports to those zones and apply Threat Defense policy between them.
Product Comparison
|
Parameter |
FPR1140-NGFW-K9 | |||
|---|---|---|---|---|
|
Throughput: FW + AVC (1024B) |
3.3 Gbps |
Not applicable |
2.3 Gbps |
5.3 Gbps |
|
Throughput: FW + AVC + IPS (1024B) |
3.3 Gbps |
Not applicable |
2.3 Gbps |
4.9 Gbps |
|
Throughput: NGIPS (1024B) |
3.5 Gbps |
Not applicable |
2.6 Gbps |
6.1 Gbps |
|
Maximum concurrent sessions, with AVC |
400000 |
Not applicable |
200000 |
600000 |
|
IPsec VPN throughput (1024B TCP w/Fastpath) |
1.4 Gbps |
Not applicable |
1.2 Gbps |
2.4 Gbps |
|
Maximum VPN peers |
400 |
400 |
150 |
800 |
|
Network interfaces |
8 x RJ-45, 4 x SFP |
8 x RJ-45, 4 x SFP |
8 x RJ-45, 4 x SFP |
8 x RJ-45, 2 x SFP, 2 x SFP+ |
|
Power supply configuration |
Integrated, single AC input |
Integrated, single AC input |
Integrated, single AC input |
Integrated, single AC input |
FPR1140-NGFW-K9 runs Firewall Threat Defense software with optional threat subscriptions, while FPR1140-ASA-K9 is the same 1RU chassis with eight RJ-45 and four SFP ports ordered for ASA software and an optional security-context license. Sizing starts from Threat Defense inspection: FPR1140-NGFW-K9 is rated 3.3 Gbps FW + AVC + IPS, 400000 sessions with AVC and 400 VPN peers, so sites that need 4.9 Gbps with IPS, 600000 sessions or 800 peers move to FPR1150-NGFW-K9. FPR1150-NGFW-K9 also swaps two SFP ports for 10G SFP+, which 10G uplinks need. Branches below 2.3 Gbps of FW + AVC + IPS and 150 VPN peers can drop to FPR1120-NGFW-K9, which keeps the same eight RJ-45 and four SFP layout.
Ordering Checklist
- Threat Defense subscriptions: Add the Threat, Malware or URL subscription term to FPR1140-NGFW-K9; these subscriptions are listed only for chassis running Firewall Threat Defense software. A subscription cannot be added to a chassis ordered with ASA software.
- Smart Licensing account: Make sure the customer’s Smart Software Manager account exists before the Threat Defense order is placed. All ordered licenses are deposited into that account after the order.
- Rack and cable accessories: Add the FPR1K-RM-BRKT=, FPR1K-CBL-MGMT=, FPR1K-RM-ACY-KIT= and FPR1K-RM-FIPS-KIT= accessory PIDs the install needs for the Firepower 1120, 1140 and 1150 chassis. A rack, cable-management or FIPS accessory left off the order has to be bought as a separate spare.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1140T-AMP-1Y |
Cisco Firepower 1140 Threat Defense Malware Protection 1Y subscription |
|
L-FPR1140T-T-1Y |
Cisco Firepower 1140 Threat Defense Threat Protection 1Y subscription |
|
L-FPR1140T-URL-1Y |
Cisco Firepower 1140 Threat Defense URL Filtering 1Y subscription |
|
Cisco Firepower 1140 Threat Defense Threat, Malware, and URL 1Y subscription | |
|
FPR1K-CBL-MGMT= |
Cisco Firepower 1K Series cable-management brackets for 1120, 1140, and 1150 appliances |
|
FPR1K-RM-ACY-KIT= |
Cisco Firepower 1K Series accessory kit for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-BRKT= |
Cisco Firepower 1K Series rackmount brackets for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-FIPS-KIT= |
Cisco Firepower 1K Series FIPS kit for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-SSD200= |
Cisco Firepower 1K Series 200 GB SSD for FPR-1120, 1140, and 1150 appliances |
|
1000BASE-T SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports | |
|
1000BASE-SX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports | |
|
1000BASE-LX/LH SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports | |
|
1000BASE-EX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports | |
|
1000BASE-ZX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
FPR1140-NGFW-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Rear Panel LEDs
|
1 |
NetworkStatus of the network ports:Link status (L):Off—No link, or port is not in use.Green—Link established.Green, flashing—Link activity. |
2 |
NetworkStatus of the network ports:Connection-speed status (S):Green, flashing—One flash every three seconds = 10 Mbps.Green, flashing—Two rapid flashes = 100 Mbps.Green, flashing—Three rapid flashes = 1000 Mbps. |
|
3 |
SFPStatus of the SFP transceiver:Link status (L):Off—No SFP.Amber—SFP present, but no link.Green, flashing—Link established and transmitting. |
4 |
PowerPower supply status:Off —Power supply off.Green—Power supply on. |
|
5 |
StatusSystem operating status:Off—System has not booted up yet.Green, flashing quickly—System is booting up.Green—Normal system function.Amber—Critical alarm indicating one or more of the following:Major failure of a hardware or software component.Over-temperature condition.Power voltage outside the tolerance range.Green, flashing slowly (twice in 5 seconds)—Cloud connected.Note Security Cloud Control is valid for FTD 6.7 and later.Green and amber, flashing—Cloud connection failure.Green—Cloud disconnected.Note The Security Cloud Control LED pattern applies to zero-touch provisioning (ZTP). See the Easy Deployment Guide for Cisco Secure Firewall Threat Defense with Cisco Security Cloud Control for more information. |
6 |
ActiveStatus of the failover pair:Off— Failover is not operational.Green—Failover pair operating normally. The LED is green always unless the chassis in a high availability pair.Amber—When the chassis is in a high availability pair, the LED is amber for the standby unit.Note For Active-Active cases with multi-context enabled, since there will be multiple groups with Active and Standby units, any unit can be in the Active or Standby state in each group, thus the LED behavior is not deterministic. Therefore, you must ignore the LED status for Active-Active cases. |
|
7 |
SSDStatus of the SSD:Off— No SSD present.Green—SSD detected.Green, flashing—Activity on the SSD.Note See Replace the SSD for the procedure for replacing a failed SSD. |
— |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1140-NGFW-K9 | Product type | Cisco Firepower 1140 NGFW appliance |
| Firewall model | Firepower 1140 | Security software role | Firewall Threat Defense software with optional subscriptions |
| Rack units | 1RU rack mount | Fixed RJ-45 ports | 8 x Gigabit Ethernet RJ-45 10/100/1000BASE-T |
| Fixed SFP ports | 4 x fixed 1-Gbps SFP ports | Management port | 1 x 1000BASE-T management port |
| Console port | RJ-45 serial console and USB Mini B serial console | USB port | 1 x USB 3.0 Type-A |
| SSD storage | 1 x 200 GB 2.5-in SATA SSD | Airflow | I/O side to non-I/O side |
| Fan modules | 1 fixed internal fan | Default power supply | 1 fixed internal AC power supply |
| Power redundancy | No redundant power supply option listed | AC input voltage | 100 to 240V AC |
| AC input frequency | 50 to 60 Hz | AC maximum power draw | 100 W |
| AC maximum current draw | Less than 2 A at 100V; less than 1 A at 240V | Mounting | 2-post mounting brackets included |
| Weight | 3.63 kg (8 lb) | Operating temperature | 32 to 104F (0 to 40C) |
| Operating humidity | 90% noncondensing | Operating altitude | 9843 ft (3000 m) maximum |
| Fixed SFP release baseline | Threat Defense 6.4 or ASA 9.15 for listed SFPs | Supported fixed SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| Cisco device manager | Local management supported | Centralized management | Firewall Management Center or Cisco Defense Orchestrator |
| AVC support | Standard | FW + AVC throughput | 3.3 Gbps |
| FW + AVC + IPS throughput | 3.3 Gbps | NGIPS throughput | 3.5 Gbps |
| TLS throughput | 1.2 Gbps | Concurrent sessions with AVC | 400000 |
| New connections with AVC | 22000 per second | IPsec VPN throughput | 1.4 Gbps |
| Maximum VPN peers | 400 |
Get More Information
Need pricing, stock, or shipping details for the FPR1140-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
How much memory does FPR1140-NGFW-K9 have?
-
What AC input does FPR1140-NGFW-K9 need?
-
What operating environment does FPR1140-NGFW-K9 support?
-
What TLS inspection rate and new connection rate does FPR1140-NGFW-K9 reach?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Our IT procurement is competitive. Layer23 wins the business because they deliver.
Cost-conscious procurement department finally has a vendor they like.
Product was in pristine condition on arrival.
It belongs in a rack! And it got here safely. Good work.
Reliable vendor for our critical infrastructure needs.