FPR1150-ASA-K9 – 8xRJ45 Data Ports – 2x1G SFP Ports – 2x10G SFP+ Ports – ASA Firewall
1/mo Solds
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR1150-ASA-K9 Description
FPR1150-ASA-K9 is a Cisco Firepower 1150 ASA firewall appliance in the Firepower 1000 Series for ASA software edge and VPN deployments. The 1RU platform provides eight RJ-45 data ports, two fixed 1G SFP ports, two fixed 10G SFP+ ports, a dedicated 1000BASE-T management interface, a 200 GB SATA SSD, and fixed internal AC power, with Cisco-published ASA performance including 7.5 Gbps stateful inspection throughput, 4.5 Gbps multiprotocol firewall throughput, 600000 concurrent firewall connections, 1.7 Gbps IPsec VPN throughput, and up to 800 VPN peers.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1150-ASA-K9 |
|
Product type |
Cisco Firepower 1150 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45, 2 x SFP, and 2 x SFP+ |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
|
Internal power input |
Single fixed internal AC power supply |
|
Fan design |
1 fixed fan |
|
Stateful inspection firewall throughput |
7.5 Gbps |
|
ASA multiprotocol firewall throughput |
4.5 Gbps |
|
Concurrent firewall connections |
600000 |
Product Performance
Key Features
Cisco ordering guidance lists FPR1150-ASA-K9 as the Firepower 1150 1RU appliance ordered to run ASA software with optional security-context licensing.
The 1150 hardware keeps eight RJ-45 data ports and adds a fixed optical layout of two SFP ports plus two SFP+ ports, unlike the 1120 and 1140 models that use four fixed SFP ports.
The 1150 ASA row raises stateful throughput, multiprotocol throughput, firewall connections, new connections per second, IPsec VPN throughput, VPN peers, and security-context maximum compared with the 1140 ASA row.
Cisco lists two included contexts and a 25-context maximum for the 1150 ASA row, so the BOM should identify whether add-on context licenses are needed.
The Firepower 1150 uses one fixed internal AC power supply and one fixed fan, so appliance-level power redundancy is not added by ordering spare power modules.
Cisco documents both the shared 1G SFP list for Firepower 1120, 1140, and 1150 fixed ports and a separate 1150 fixed-port list for 10G SFP, DAC, and AOC options with the stated software baseline.
Application Scenarios
Specify FPR1150-ASA-K9 when the operations standard remains Cisco ASA and the approved sizing sheet points above the Firepower 1140 ASA values.
Place this SKU in the quote when the firewall must support built-in RJ-45 access plus fixed SFP and SFP+ uplinks without moving into a modular Firepower 2100 or 4100 appliance class.
Use the ASA PID when existing procedures, rule migration, and support ownership are tied to Cisco ASA; use FPR1150-NGFW-K9 only when the project changes to Firewall Threat Defense subscriptions.
Product Comparison
|
Parameter |
FPR1150-ASA-K9 | |||
|---|---|---|---|---|
|
Cisco PID description |
Firepower 1150 1RU appliance running ASA software |
Firepower 1150 1RU appliance running Threat Defense software |
Firepower 1140 1RU appliance running ASA software |
Firepower 1120 1RU appliance running ASA software |
|
Firewall model |
Firepower 1150 |
Firepower 1150 |
Firepower 1140 |
Firepower 1120 |
|
Security software role |
Cisco ASA software |
Firewall Threat Defense software with optional subscriptions |
Cisco ASA software |
Cisco ASA software |
|
Form factor |
1RU rack mount |
1RU rack mount |
1RU rack mount |
1RU rack mount |
|
Fixed data interfaces |
8 x RJ-45, 2 x SFP, and 2 x SFP+ |
8 x RJ-45, 2 x SFP, and 2 x SFP+ |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
|
ASA stateful inspection throughput |
7.5 Gbps |
Threat Defense software role |
6 Gbps |
4.5 Gbps |
|
ASA multiprotocol throughput |
4.5 Gbps |
Threat Defense software role |
3.5 Gbps |
2.5 Gbps |
|
Concurrent firewall connections |
600000 |
Threat Defense software role |
400000 |
200000 |
|
New connections per second |
150000 |
Threat Defense software role |
100000 |
75000 |
|
IPsec VPN throughput |
1.7 Gbps |
Threat Defense software role |
1.2 Gbps |
1 Gbps |
|
Maximum VPN peers |
800 |
800 |
400 |
150 |
|
Security contexts |
2 included; 25 maximum |
Threat Defense software role |
2 included; 5 maximum |
2 included; 5 maximum |
|
Internal power input |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
Single fixed internal AC power supply |
- In a FPR1150-ASA-K9 vs FPR1150-NGFW-K9 comparison, the fixed interface layout and 1150 appliance class match, but the current SKU follows the ASA software order path while the NGFW PID is tied to Threat Defense software and subscriptions.
- The FPR1150-ASA-K9 difference from FPR1140-ASA-K9 is both capacity and port mix: the 1150 raises the ASA values and changes two of the four fixed SFP positions into SFP+ ports.
- For FPR1150-ASA-K9 vs FPR1120-ASA-K9, the 1150 comparison shows a larger ASA firewall tier, more VPN peers, a higher context ceiling, and fixed 10G optical capability.
- Buyers deciding which model to choose should separate ASA from Threat Defense first, then compare the 1120, 1140, and 1150 rows by Cisco-listed performance, context limit, VPN scale, and fixed-port plan.
Selection Guide
1. Confirm the ASA software path
Choose FPR1150-ASA-K9 when the approved firewall standard is Cisco ASA on a Firepower 1150 appliance, not a Threat Defense subscription deployment.
2. Size against the 1150 ASA table row
Select this SKU when the design needs 7.5 Gbps stateful inspection throughput, 4.5 Gbps multiprotocol throughput, 600000 concurrent firewall connections, or 800 maximum VPN peers.
3. Check port media before substituting models
Keep this SKU when the fixed-port plan needs SFP+ optics or DAC/AOC options; the 1120 and 1140 ASA models use four fixed SFP ports instead.
4. Treat context scale as a BOM item
Verify whether the included contexts are enough, because the 1150 ASA row allows a higher context maximum than 1120 or 1140 but still requires the correct add-on license plan.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Exact appliance PID |
Confirm FPR1150-ASA-K9 rather than FPR1150-NGFW-K9 |
Cisco separates ASA and Threat Defense orderable roles for the Firepower 1150 |
|
ASA license scope |
Include the required ASA Essentials license and any needed context license |
Cisco ASA guidance lists Essentials as required and context licenses as additive |
|
Security-context ceiling |
Confirm whether 2 included contexts are enough or whether the design needs expansion toward the 25-context maximum |
The 1150 ASA row has a different maximum than the 1120 and 1140 ASA rows |
|
Fixed SFP and SFP+ optics |
Match 1G SFP and 10G SFP+ ports to Cisco-listed transceiver or cable PIDs |
Unsupported or mismatched optics can delay installation and support acceptance |
|
Power and rack plan |
Confirm single internal AC input, country power cord, rack brackets, and cable-management accessories |
The 1150 does not provide field-replaceable PSU or fan modules |
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1000-ASA= |
Cisco Firepower 1000 Series ASA Essentials license |
|
L-FPR1K-ASASC-5= |
Cisco Firepower 1000 Series add-on 5 security context license |
|
L-FPR1K-ASASC-10= |
Cisco Firepower 1000 Series add-on 10 security context license |
|
L-FPR1K-ENC-K9= |
Cisco Firepower 1K Series ASA strong encryption license |
|
FPR1K-CBL-MGMT= |
Cable-management brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-ACY-KIT= |
Accessory kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-BRKT= |
Rackmount brackets for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-FIPS-KIT= |
FIPS kit for Firepower 1120, 1140, and 1150 appliances |
|
FPR1K-RM-SSD200= |
200 GB SSD for Firepower 1120, 1140, and 1150 appliances |
|
GLC-TE |
1000BASE-T SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-SX-MMD |
1000BASE-SX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-LH-SMD |
1000BASE-LX/LH SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-EX-SMD |
1000BASE-EX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-ZX-SMD |
1000BASE-ZX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
SFP-10G-SR |
10G SFP transceiver listed for Firepower 1150 fixed ports |
|
SFP-10G-LR |
10G SFP transceiver listed for Firepower 1150 fixed ports |
|
SFP-10G-ER |
10G SFP transceiver listed for Firepower 1150 fixed ports |
|
SFP-H10GB-CUxM |
10G SFP copper cable family listed for Firepower 1150 fixed ports |
|
SFP-10G-AOCxM |
10G active optical cable family listed for Firepower 1150 fixed ports |
FPR1150-NGFW-K9 Rear View
|
1 5373_befd24-31> |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. 5373_d46ad3-c5> |
2 5373_22c7e9-5d> |
Power cord socket 5373_e27bbe-cf> |
|
3 5373_804d82-6a> |
Management port 5373_2353fe-ae> |
4 5373_27822d-9d> |
SFP ports (numbered 9 through 12) 5373_251905-72> |
|
5 5373_ca3bd4-a7> |
USB Type A port 5373_b6d60b-cb> |
6 5373_9579db-c6> |
USB Mini B console port 5373_3ab2d9-f5> |
|
7 5373_6d1a25-93> |
RJ-45 (8P8C) console port 5373_e46367-3a> |
8 5373_ae759a-cc> |
Network data ports 5373_903617-65> |
|
9 5373_c98296-fb> |
Status LEDs 5373_ebbb01-be> |
10 5373_0c5283-de> |
Reset button 5373_cb2bf0-64> |
|
11 5373_4500cf-40> |
SSD LED 5373_0a17c1-6b> |
12 5373_0eb2d8-0c> |
SSD bay 5373_44f60c-63> |
Rear Panel LEDs
|
1 5373_4a40b2-f9> |
NetworkStatus of the network ports:Link status (L):Off—No link, or port is not in use.Green—Link established.Green, flashing—Link activity. 5373_377905-78> |
2 5373_fbae65-e3> |
NetworkStatus of the network ports:Connection-speed status (S):Green, flashing—One flash every three seconds = 10 Mbps.Green, flashing—Two rapid flashes = 100 Mbps.Green, flashing—Three rapid flashes = 1000 Mbps. 5373_908e05-d8> |
|
3 5373_04a774-fe> |
SFPStatus of the SFP transceiver:Link status (L):Off—No SFP.Amber—SFP present, but no link.Green, flashing—Link established and transmitting. 5373_109c27-0d> |
4 5373_6a12fa-ab> |
PowerPower supply status:Off —Power supply off.Green—Power supply on. 5373_bc5454-33> |
|
5 5373_b0bd9e-19> |
StatusSystem operating status:Off—System has not booted up yet.Green, flashing quickly—System is booting up.Green—Normal system function.Amber—Critical alarm indicating one or more of the following:Major failure of a hardware or software component.Over-temperature condition.Power voltage outside the tolerance range.Green, flashing slowly (twice in 5 seconds)—Cloud connected.Note Security Cloud Control is valid for FTD 6.7 and later.Green and amber, flashing—Cloud connection failure.Green—Cloud disconnected.Note The Security Cloud Control LED pattern applies to zero-touch provisioning (ZTP). See the Easy Deployment Guide for Cisco Secure Firewall Threat Defense with Cisco Security Cloud Control for more information. 5373_e5ad08-2b> |
6 5373_56a7dd-12> |
ActiveStatus of the failover pair:Off— Failover is not operational.Green—Failover pair operating normally. The LED is green always unless the chassis in a high availability pair.Amber—When the chassis is in a high availability pair, the LED is amber for the standby unit.Note For Active-Active cases with multi-context enabled, since there will be multiple groups with Active and Standby units, any unit can be in the Active or Standby state in each group, thus the LED behavior is not deterministic. Therefore, you must ignore the LED status for Active-Active cases. 5373_3a8b0b-bb> |
|
7 5373_352761-45> |
SSDStatus of the SSD:Off— No SSD present.Green—SSD detected.Green, flashing—Activity on the SSD.Note See Replace the SSD for the procedure for replacing a failed SSD. 5373_0594bd-06> | 5373_b177e9-93> |
— 5373_e96de5-c3> |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1150-ASA-K9 | Product Type | Cisco Firepower 1150 ASA firewall appliance |
| Firewall Model | Firepower 1150 | Security Software Role | Cisco ASA software |
| Form Factor | 1RU rack mount | Fixed RJ-45 Ports | 8 x RJ-45 |
| Fixed Optical Ports | 2 x SFP and 2 x SFP+ | Management Port | 1 x 1000BASE-T management port |
| Console Interfaces | RJ-45 serial console and USB Mini B serial console | USB Port | 1 x USB 3.0 Type-A |
| Storage | 1 x 200 GB 2.5-in SATA SSD | Airflow | I/O side to non-I/O side |
| Fan Modules | 1 fixed fan | Power Supply | 1 fixed internal AC power supply |
| Power Redundancy | No redundant power supply option listed | AC Input Voltage | 100 to 240V AC |
| AC Frequency | 50 to 60 Hz | AC Maximum Power Draw | 100 W |
| AC Maximum Current Draw | Less than 2 A at 100V; less than 1 A at 240V | Rack Mounting | 2-post mounting brackets included |
| Weight | 8 lb (3.6 kg) | Operating Temperature | 32 to 104F (0 to 40C) |
| Operating Humidity | 90% noncondensing | Operating Altitude | 9843 ft (3000 m) maximum |
| Fixed SFP Release Baseline | Threat Defense 6.4 or ASA 9.15 for listed SFPs | Supported Fixed 1G SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| Supported Fixed 10G Options | SFP-10G-SR, SFP-10G-SR-S, SFP-10G-LR, SFP-10G-LR-S, SFP-10G-ER, SFP-10G-ER-S, SFP-H10GB-CUxM, SFP-H10GB-ACUxM, SFP-10G-AOCxM | High Availability | Active/active and active/standby |
| Stateful Inspection Firewall Throughput | 7.5 Gbps | Multiprotocol Firewall Throughput | 4.5 Gbps |
| Concurrent Firewall Connections | 600000 | New Connections Per Second | 150000 |
| IPsec VPN Throughput | 1.7 Gbps | Maximum VPN Peers | 800 |
| Security Contexts | 2 included; 25 maximum | Local ASA Management | Adaptive Security Device Manager |
| ASA Centralized Management | Cisco Security Manager or Cisco Defense Orchestrator | Required ASA License | Essentials license L-FPR1000-ASA= |
| Context License Options | L-FPR1K-ASASC-5= and L-FPR1K-ASASC-10= |
Get More Information
Need pricing, stock, or shipping details for the FPR1150-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What role fits FPR1150-ASA-K9 in an ASA deployment?
-
How is FPR1150-ASA-K9 different from FPR1140-ASA-K9?
-
Which port layout does FPR1150-ASA-K9 provide?
-
Which performance gap does FPR1150-ASA-K9 close?
-
When does FPR1150-ASA-K9 make more sense than FPR1140-ASA-K9?
-
Can FPR1150-ASA-K9 replace an ASA 5545-X or larger ASA edge?
-
What AnyConnect question belongs with FPR1150-ASA-K9?
-
What HA detail matters before ordering two FPR1150-ASA-K9 units?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.

Inspection criteria included cosmetics, fit, function — all passed.
After our first order, I’m a believer. They do exactly what they promise.
Our annual vendor review consistently rates Layer23 among the best.
A reliable supply line. The force is strong with this vendor.
Genuine products. Verification passed. Will order again.