FPR1150-NGFW-K9 – 5.3G FTD NGFW Firewall – 8xRJ45 2xSFP 2xSFP+ – 1RU 1150
2/mo Solds
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR1150-NGFW-K9 Description
FPR1150-NGFW-K9 is a Cisco Firepower 1150 NGFW firewall appliance for Firewall Threat Defense deployments in the Firepower 1000 Series. It fits branch, internet-edge, and security-services roles that need fixed firewall hardware with eight RJ-45 ports, two SFP ports, two 10G SFP+ ports, a dedicated 1000BASE-T management port, 200 GB SATA SSD storage, and a 1RU chassis with fixed AC power and fixed internal cooling. Cisco-published performance for the Firepower 1150 includes 5.3 Gbps FW + AVC throughput, 4.9 Gbps FW + AVC + IPS throughput, 6.1 Gbps NGIPS throughput, and 600000 concurrent sessions with AVC, making the SKU a defined NGFW-orderable variant rather than the ASA-orderable FPR1150-ASA-K9.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR1150-NGFW-K9 |
|
Product type |
Cisco Firepower 1150 NGFW appliance |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
8 x RJ-45, 2 x SFP, and 2 x 10G SFP+ |
|
Management interface |
1 x 1000BASE-T management port |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
|
Power and cooling design |
Integrated single AC input and 1 integrated fan |
|
FW + AVC throughput |
5.3 Gbps |
|
FW + AVC + IPS throughput |
4.9 Gbps |
|
NGIPS throughput |
6.1 Gbps |
|
Concurrent sessions with AVC |
600000 |
Product Performance
Key Features
Cisco ordering guidance identifies FPR1150-NGFW-K9 as the Firepower 1150 1RU NGFW appliance that runs Firewall Threat Defense software with optional subscriptions.
The Firepower 1150 interface set uses eight RJ-45 ports, two fixed SFP ports, and two fixed 10G SFP+ positions, so the uplink plan differs from 1120 and 1140 NGFW orders.
Within the 1120, 1140, and 1150 rack-mount group, the 1150 row carries the largest Cisco-listed Threat Defense throughput, NGIPS, session, connection-rate, IPsec VPN, and VPN-peer values.
Cisco lists separate Firepower 1150 Threat Defense Malware, Threat, URL, and combined subscription part numbers, so the service term must match the selected 1150 NGFW appliance.
Threat Defense operation can use local device management or centralized management, and the selected software train should be checked against Cisco compatibility guidance for the 1150 platform.
The Firepower 1100 hardware guide confirms one fixed internal AC power supply and one fixed fan, making rack, power-cord, FIPS, SSD, and cable-management accessories the practical hardware add-on checks.
Application Scenarios
Specify FPR1150-NGFW-K9 when the branch or remote-site firewall design needs Threat Defense services plus fixed 10G SFP+ connectivity on a 1RU appliance.
Use this SKU when the approved sizing worksheet exceeds the Firepower 1140 Threat Defense row but still fits the Firepower 1000 Series rack-mount appliance format.
Place this PID in the BOM when appliance identity, security subscriptions, Smart Account ownership, and management records must stay on the NGFW order path instead of the ASA order path.
Product Comparison
|
Parameter |
FPR1150-NGFW-K9 | |||
|---|---|---|---|---|
|
Cisco PID description |
Firepower 1150 NGFW Appliance, 1RU |
Firepower 1150 NGFW Appliance, 1RU running ASA software |
Firepower 1140 NGFW Appliance, 1RU |
Firepower 1120 NGFW Appliance, 1RU |
|
Firewall model |
Firepower 1150 |
Firepower 1150 |
Firepower 1140 |
Firepower 1120 |
|
Security software role |
Firewall Threat Defense software with optional subscriptions |
ASA software with optional security-context license |
Firewall Threat Defense software with optional subscriptions |
Firewall Threat Defense software with optional subscriptions |
|
Form factor |
1RU rack mount |
1RU rack mount |
1RU rack mount |
1RU rack mount |
|
Fixed data interfaces |
8 x RJ-45, 2 x SFP, and 2 x 10G SFP+ |
8 x RJ-45, 2 x SFP, and 2 x SFP+ |
8 x RJ-45 and 4 x SFP |
8 x RJ-45 and 4 x SFP |
|
Storage |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
1 x 200 GB 2.5-in SATA SSD |
|
Threat Defense FW + AVC throughput |
5.3 Gbps |
ASA software role |
3.3 Gbps |
2.3 Gbps |
|
Threat Defense FW + AVC + IPS throughput |
4.9 Gbps |
ASA software role |
3.3 Gbps |
2.3 Gbps |
|
Threat Defense NGIPS throughput |
6.1 Gbps |
ASA software role |
3.5 Gbps |
2.6 Gbps |
|
Threat Defense sessions with AVC |
600000 |
ASA software role |
400000 |
200000 |
|
New connections with AVC |
28000 per second |
ASA software role |
22000 per second |
15000 per second |
|
Threat Defense IPsec VPN throughput |
2.4 Gbps |
ASA software role |
1.4 Gbps |
1.2 Gbps |
|
Maximum VPN peers |
800 |
800 |
400 |
150 |
|
Internal power input |
Integrated single AC input |
Single fixed internal AC power supply |
Integrated single AC input |
Integrated single AC input |
- In a FPR1150-NGFW-K9 vs FPR1150-ASA-K9 comparison, the 1150 appliance class and fixed interface layout match, but the current SKU is ordered for Firewall Threat Defense software and subscriptions while the ASA PID follows the ASA software path.
- The FPR1150-NGFW-K9 difference from FPR1140-NGFW-K9 is both sizing and port mix: the 1150 raises Cisco-listed Threat Defense values and changes two fixed SFP positions into 10G SFP+ ports.
- For FPR1150-NGFW-K9 vs FPR1120-NGFW-K9, the comparison shows a larger Threat Defense row, more VPN peers, higher session capacity, and fixed 10G optical capability.
- Buyers deciding which model to choose should first separate NGFW from ASA, then compare the 1120, 1140, and 1150 rows by fixed interfaces, throughput, sessions, connection rate, IPsec VPN, and VPN-peer values.
Selection Guide
1. Confirm the Threat Defense order path
Choose FPR1150-NGFW-K9 when the project names Firewall Threat Defense on a Firepower 1150 appliance and requires Cisco NGFW subscriptions.
2. Use the 1150 row for higher FTD sizing
Select this SKU when 4.9 Gbps FW + AVC + IPS throughput, 6.1 Gbps NGIPS throughput, 600000 sessions with AVC, or 800 maximum VPN peers are part of the sizing decision.
3. Protect the 10G fixed-port requirement
Keep FPR1150-NGFW-K9 when the cabling plan needs the 1150 mix of RJ-45, SFP, and SFP+ ports; the 1120 and 1140 NGFW models stay on four fixed SFP positions.
4. Do not substitute the ASA PID for an FTD design
Use FPR1150-ASA-K9 only when the approved design is Cisco ASA software with ASA licensing instead of the Threat Defense subscription model.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Appliance identity |
Confirm FPR1150-NGFW-K9 rather than FPR1150-ASA-K9 |
Cisco publishes separate orderable roles for Threat Defense and ASA software on the Firepower 1150 |
|
Threat Defense sizing |
Record the required FW + AVC, FW + AVC + IPS, NGIPS, sessions, new connections, IPsec VPN, and VPN peer values |
Substituting a 1120 or 1140 changes Cisco-listed capacity and fixed-interface rows |
|
Subscription family |
Select the correct Firepower 1150 Threat, Malware, URL, or combined subscription term |
Firepower 1150 subscriptions use model-specific 1150T part numbers |
|
Smart Account owner |
Assign software subscriptions to the correct customer Smart Account |
License activation and entitlement tracking depend on the account selected during ordering |
|
Fixed-port optics |
Match both 1G SFP and 10G SFP+ positions to Cisco-supported optic, DAC, or AOC PIDs |
The Firepower 1150 has a separate fixed-port 10G optics list and software release baseline |
|
Management and release plan |
Verify local or centralized management against the planned Threat Defense software version |
Cisco compatibility tables differ by hardware model, management mode, and release train |
|
Rack and power items |
Add the required country power cord, rack brackets, cable-management, FIPS, or SSD accessory lines |
The appliance uses fixed internal AC power and a fixed fan rather than field-replaceable PSU or fan modules |
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR1150T-AMP-1Y |
Cisco FPR1150 Threat Defense Malware Protection 1Y subscription |
|
L-FPR1150T-T-1Y |
Cisco FPR1150 Threat Defense Threat Protection 1Y subscription |
|
L-FPR1150T-URL-1Y |
Cisco FPR1150 Threat Defense URL Filtering 1Y subscription |
|
L-FPR1150T-TMC-1Y |
Cisco FPR1150 Threat Defense Threat, Malware, and URL 1Y subscription |
|
FPR1K-CBL-MGMT= |
Cisco Firepower 1K Series cable-management brackets for 1120, 1140, and 1150 appliances |
|
FPR1K-RM-ACY-KIT= |
Cisco Firepower 1K Series accessory kit for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-BRKT= |
Cisco Firepower 1K Series rackmount brackets for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-FIPS-KIT= |
Cisco Firepower 1K Series FIPS kit for FPR-1120, 1140, and 1150 appliances |
|
FPR1K-RM-SSD200= |
Cisco Firepower 1K Series 200 GB SSD for FPR-1120, 1140, and 1150 appliances |
|
GLC-TE |
1000BASE-T SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-SX-MMD |
1000BASE-SX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-LH-SMD |
1000BASE-LX/LH SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-EX-SMD |
1000BASE-EX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
GLC-ZX-SMD |
1000BASE-ZX SFP transceiver listed for Firepower 1120, 1140, and 1150 fixed ports |
|
SFP-10G-SR |
10G SFP transceiver listed for Firepower 1150 fixed ports |
|
SFP-10G-LR |
10G SFP transceiver listed for Firepower 1150 fixed ports |
|
SFP-10G-ER |
10G SFP transceiver listed for Firepower 1150 fixed ports |
|
SFP-H10GB-CUxM |
10G SFP copper cable family listed for Firepower 1150 fixed ports |
|
SFP-10G-AOCxM |
10G active optical cable family listed for Firepower 1150 fixed ports |
FPR1150-NGFW-K9 Rear View
|
1 |
Power switchNote The power switch provides a way to gracefully shut down the system and place it in standby. The power supply and fan remain active and the fan may continue to spin at slow speed. To achieve total power shut down, unplug the power supply from the chassis. |
2 |
Power cord socket |
|
3 |
Management port |
4 |
SFP ports (numbered 9 through 12) |
|
5 |
USB Type A port |
6 |
USB Mini B console port |
|
7 |
RJ-45 (8P8C) console port |
8 |
Network data ports |
|
9 |
Status LEDs |
10 |
Reset button |
|
11 |
SSD LED |
12 |
SSD bay |
Rear Panel LEDs
|
1 |
NetworkStatus of the network ports:Link status (L):Off—No link, or port is not in use.Green—Link established.Green, flashing—Link activity. |
2 |
NetworkStatus of the network ports:Connection-speed status (S):Green, flashing—One flash every three seconds = 10 Mbps.Green, flashing—Two rapid flashes = 100 Mbps.Green, flashing—Three rapid flashes = 1000 Mbps. |
|
3 |
SFPStatus of the SFP transceiver:Link status (L):Off—No SFP.Amber—SFP present, but no link.Green, flashing—Link established and transmitting. |
4 |
PowerPower supply status:Off —Power supply off.Green—Power supply on. |
|
5 |
StatusSystem operating status:Off—System has not booted up yet.Green, flashing quickly—System is booting up.Green—Normal system function.Amber—Critical alarm indicating one or more of the following:Major failure of a hardware or software component.Over-temperature condition.Power voltage outside the tolerance range.Green, flashing slowly (twice in 5 seconds)—Cloud connected.Note Security Cloud Control is valid for FTD 6.7 and later.Green and amber, flashing—Cloud connection failure.Green—Cloud disconnected.Note The Security Cloud Control LED pattern applies to zero-touch provisioning (ZTP). See the Easy Deployment Guide for Cisco Secure Firewall Threat Defense with Cisco Security Cloud Control for more information. |
6 |
ActiveStatus of the failover pair:Off— Failover is not operational.Green—Failover pair operating normally. The LED is green always unless the chassis in a high availability pair.Amber—When the chassis is in a high availability pair, the LED is amber for the standby unit.Note For Active-Active cases with multi-context enabled, since there will be multiple groups with Active and Standby units, any unit can be in the Active or Standby state in each group, thus the LED behavior is not deterministic. Therefore, you must ignore the LED status for Active-Active cases. |
|
7 |
SSDStatus of the SSD:Off— No SSD present.Green—SSD detected.Green, flashing—Activity on the SSD.Note See Replace the SSD for the procedure for replacing a failed SSD. |
— |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR1150-NGFW-K9 | Product Type | Cisco Firepower 1150 NGFW appliance |
| Firewall Model | Firepower 1150 | Security Software Role | Firewall Threat Defense software with optional subscriptions |
| Form Factor | 1RU rack mount | Fixed RJ-45 Ports | 8 x RJ-45 |
| Fixed Optical Ports | 2 x SFP and 2 x 10G SFP+ | Management Port | 1 x 1000BASE-T management port |
| Console Interfaces | RJ-45 serial console and USB Mini B serial console | USB Port | 1 x USB 3.0 Type-A |
| Storage | 1 x 200 GB 2.5-in SATA SSD | Airflow | I/O side to non-I/O side |
| Fan Modules | 1 fixed internal fan | Power Supply | 1 fixed internal AC power supply |
| Power Redundancy | No redundant power supply option listed | AC Input Voltage | 100 to 240V AC |
| AC Frequency | 50 to 60 Hz | AC Maximum Power Draw | 100 W |
| AC Maximum Current Draw | Less than 2 A at 100V; less than 1 A at 240V | Rack Mounting | 2-post mounting brackets included |
| Weight | 8 lb (3.6 kg) | Operating Temperature | 32 to 104F (0 to 40C) |
| Operating Humidity | 90% noncondensing | Operating Altitude | 9843 ft (3000 m) maximum |
| Fixed SFP Release Baseline | Threat Defense 6.4 or ASA 9.15 for listed SFPs | Supported Fixed 1G SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
| Supported Fixed 10G Options | SFP-10G-SR, SFP-10G-SR-S, SFP-10G-LR, SFP-10G-LR-S, SFP-10G-ER, SFP-10G-ER-S, SFP-H10GB-CUxM, SFP-H10GB-ACUxM, SFP-10G-AOCxM | Cisco Device Manager | Local management supported |
| Centralized Management | Firewall Management Center or Cisco Defense Orchestrator | FW + AVC Throughput | 5.3 Gbps |
| FW + AVC + IPS Throughput | 4.9 Gbps | NGIPS Throughput | 6.1 Gbps |
| TLS Throughput | 1.4 Gbps | Concurrent Sessions with AVC | 600000 |
| New Connections with AVC | 28000 per second | IPsec VPN Throughput | 2.4 Gbps |
| Maximum VPN Peers | 800 | High Availability | Active/standby |
| AVC Support | Standard |
Get More Information
Need pricing, stock, or shipping details for the FPR1150-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What makes Cisco FPR1150-NGFW-K9 different from other Firepower 1000 models?
-
What ports are included on FPR1150-NGFW-K9?
-
When should I choose FPR1150-NGFW-K9 instead of FPR1140-NGFW-K9?
-
Is FPR1150-NGFW-K9 a good fit for a small data center edge?
-
Does FPR1150-NGFW-K9 run ASA software?
-
Can FPR1150-NGFW-K9 use URL filtering and malware protection?
-
What is the main limitation of FPR1150-NGFW-K9?
-
Who is the ideal buyer for FPR1150-NGFW-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
After-sale communication was professional and helpful.
Our installation runbook applied without exception or modification.
Product was in pristine condition on arrival.
It got here so fast, it’s like you have a time machine!
Excellent customer service. Sales rep answered all my questions.