FPR2110-ASA-K9 – 12x1G RJ45 Ports – 4x1G SFP Ports – ASA Firewall
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR2110-ASA-K9 Description
The FPR2110-ASA-K9 is a Cisco Firepower 2110 firewall appliance running Cisco ASA software at a 1RU internet edge that also terminates site-to-site VPN tunnels. ASA stateful inspection is rated at 3 Gbps with 1500-byte UDP across twelve 1G RJ-45 ports and four 1G SFP ports, with 1 million concurrent connections and 1,500 VPN peers. The chassis has no network module bay, and its single 250W AC supply and its fans are built in; a failed supply or fan means returning the whole unit.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Software application |
Cisco ASA, Appliance mode by default |
|
Network interfaces |
12 x 10M/100M/1GBASE-T RJ-45 (Ethernet 1/1 to 1/12) |
|
SFP ports |
4 x 1G SFP (Ethernet 1/13 to 1/16) |
|
Network modules |
No network module bay |
|
Stateful inspection firewall throughput |
3 Gbps (1500B UDP) |
|
Concurrent firewall connections |
1 million |
|
IPsec VPN throughput |
500 Mbps (450B UDP L2L test) |
|
Maximum VPN peers |
1,500 |
|
Security contexts (included; maximum) |
2; 25 |
|
High availability |
Active/Active and Active/Standby |
|
Power supply configuration |
Single integrated 250W AC, no redundancy |
|
Form factor |
1RU, 2-post mount brackets included |
Product Performance
Key Features
ASA stateful inspection is rated at 3 Gbps with 1500-byte UDP, and at 1.5 Gbps with a multiprotocol mix made up mostly of TCP applications such as HTTP, SMTP and DNS. New connections are set up at 18,000 per second against a table of 1 million.
Ethernet 1/1 to 1/12 are 1G RJ-45 copper and Ethernet 1/13 to 1/16 are 1G SFP. With no network module bay, that layout is permanent, and fiber links on the appliance run at 1G through optics such as GLC-SX-MMD or GLC-LH-SMD.
Two security contexts run without a license. The 5-context and 10-context licenses are additive and raise the count to the Firepower 2110 maximum of 25, each context with its own firewall policy.
ASA pairs two appliances in Active/Active or Active/Standby failover. Clustering, redundant interfaces and Integrated Routing and Bridging are not supported on the Firepower 2100, and neither is the ASA FirePOWER module.
The 250W AC supply and the fans are fixed parts, not field-replaceable, and a failure of either is handled by an RMA of the chassis. Air moves front to rear, from the cold aisle into the hot aisle on the I/O side.
From ASA 9.13(1) the appliance runs in Appliance mode by default: every setting is made inside ASA and managed locally with ASDM. Cisco Security Manager or Cisco Defense Orchestrator takes over when many firewalls share one policy.
Application Scenarios
A business park or managed-services operator can divide one appliance into separate security contexts, two without a license and up to 25 with context licenses. Each tenant then keeps its own firewall policy.
At a regional office, two appliances form an ASA failover pair in Active/Active mode, and the internet edge keeps running if one chassis loses its single fixed power supply.
Headquarters networks use the appliance as the IPsec concentrator for branch tunnels, with up to 1,500 VPN peers and 500 Mbps of IPsec throughput on 450-byte UDP.
Product Comparison
|
Parameter |
FPR2110-ASA-K9 | |||
|---|---|---|---|---|
|
Stateful inspection firewall throughput (1500B UDP) |
3 Gbps |
Not applicable |
6 Gbps |
10 Gbps |
|
Throughput: FW + AVC + IPS (1024B) |
Not applicable |
2.6 Gbps |
Not applicable |
Not applicable |
|
IPsec VPN throughput |
500 Mbps (450B UDP L2L test) |
950 Mbps (1024B TCP with Fastpath) |
700 Mbps (450B UDP L2L test) |
1 Gbps (450B UDP L2L test) |
|
Maximum concurrent sessions |
1 million |
1 million (with AVC) |
1.5 million |
2 million |
|
Maximum VPN peers |
1,500 |
1,500 |
3,500 |
7,500 |
|
Integrated I/O |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 10G SFP+ |
|
Network modules |
No network module bay |
No network module bay |
No network module bay |
1 bay (10G SFP+, 1/10G FTW options) |
|
Power supply configuration |
Single integrated 250W AC |
Single integrated 250W AC |
Single integrated 250W AC |
Single 400W AC; dual 400W AC or 350W DC optional |
|
High availability |
Active/Active and Active/Standby |
Active/Standby |
Active/Active and Active/Standby |
Active/Active and Active/Standby |
FPR2110-ASA-K9 and FPR2110-NGFW-K9 are the same Firepower 2110 hardware: FPR2110-ASA-K9 runs ASA at 3 Gbps of stateful inspection, while FPR2110-NGFW-K9 runs Threat Defense at 2.6 Gbps with IPS on 1024-byte traffic. When IPS, Malware Defense or URL filtering becomes a requirement, the Threat Defense model with its L-FPR2110T-TMC= subscription is the one to order, because ASA on this platform offers only the Essentials tier; the move costs Active/Active failover. Beyond 3 Gbps, 1 million connections or 1,500 VPN peers, FPR2120-ASA-K9 keeps the same ports and 250W supply at 6 Gbps, 1.5 million and 3,500. 10G SFP+ links, a network module or a second power supply need FPR2130-ASA-K9, rated at 10 Gbps.
Ordering Checklist
- ASA Essentials license: Add L-FPR2100-ASA= and place it in the Smart Account the appliance will register to. The license is free, but it is the minimum ASA license and registration needs it in the account.
- Security contexts: Add L-FPR2K-ASASC-5= or L-FPR2K-ASASC-10= when more than the two unlicensed contexts are planned. The licenses stack up to the Firepower 2110 maximum of 25 contexts.
- Strong encryption: Add L-FPR2K-ENC-K9= only if the Smart Account is not authorized for strong encryption. Without 3DES/AES enabled, VPN and other strong-encryption features cannot be configured.
- Remote access clients: Order Cisco Secure Client licenses separately when remote users will connect, because they are not part of the ASA Essentials or context licenses.
- Rack rails: Two 2-post mount brackets come with the chassis; add FPR2K-SLIDE-RAILS for a 4-post EIA-310-D rack.
- Power cord: Select the country power cord with the system. Orders for Argentina, Brazil or Japan must carry CAB-ACR, CAB-C13-ACB or CAB-JPN on the same order.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR2100-ASA= |
ASA Essentials license for Firepower 2100 |
|
L-FPR2K-ASASC-5= |
5 additional ASA security contexts, additive |
|
L-FPR2K-ASASC-10= |
10 additional ASA security contexts, additive |
|
L-FPR2K-ENC-K9= |
Strong Encryption (3DES/AES) license for Firepower 2100 ASA |
|
FPR2K-SLIDE-RAILS= |
Slide rail kit for 4-post EIA-310-D racks |
|
FPR2K-RM-BRKT= |
Spare rack-mount brackets |
|
FPR2K-CBL-MGMT= |
Cable management brackets |
|
FPR2K-SSD100= |
100 GB SSD spare for Firepower 2110 and 2120 |
|
Supported SFP for the fixed SFP ports | |
|
Supported SFP for the fixed SFP ports | |
|
Supported SFP for the fixed SFP ports | |
|
Supported SFP for the fixed SFP ports | |
|
Supported SFP for the fixed SFP ports |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR2110-ASA-K9 | Software application | Cisco ASA; Appliance mode by default from 9.13(1), Platform mode optional |
| Integrated I/O | 12 x 10M/100M/1GBASE-T Ethernet interfaces (RJ-45), 4 x 1 Gigabit (SFP) Ethernet interfaces | Network modules | No network module bay |
| Maximum number of interfaces | Up to 16 total Ethernet ports | Integrated network management ports | 1 x 10M/100M/1GBASE-T Ethernet port (RJ-45) |
| Serial port | 1 x RJ-45 console | USB | 1 x USB 2.0 Type-A (500mA) |
| Stateful inspection firewall throughput | 3 Gbps (1500B UDP) | Stateful inspection firewall throughput (multiprotocol) | 1.5 Gbps |
| Concurrent firewall connections | 1 million | New connections per second | 18,000 |
| IPsec VPN throughput (450B UDP L2L test) | 500 Mbps | Maximum VPN peers | 1,500 |
| Security contexts (included; maximum) | 2; 25 | High availability | Active/active and active/standby |
| Scalability | VPN Load Balancing | ASA features not supported on Firepower 2100 | Integrated Routing and Bridging, redundant interfaces, clustering, Clientless SSL VPN with KCD, ASA REST API, ASA FirePOWER module, Botnet Traffic Filter, SCTP inspection maps, Diameter and GTP/GPRS inspection |
| Local management | Adaptive Security Device Manager (ASDM) | Centralized management | Cisco Security Manager or Cisco Defense Orchestrator |
| ASA license tier | Essentials (L-FPR2100-ASA=), Smart Licensing | DRAM | 16 GB |
| Cavium NPU RAM | 8 GB | Flash | 8 GB (nominal) |
| SSD storage | 1 x 100 GB SSD, 1 x spare slot (for MSP) | Power supply configuration | Single integrated 250W AC power supply, not field-replaceable |
| Redundancy | None | AC input voltage | 100 to 240V AC |
| AC maximum input current | < 2.7A at 100V | AC maximum output power | 250W |
| AC input frequency | 50 to 60 Hz | AC efficiency | >88% at 50% load |
| System power | 100/240V AC 1.9 A (at 100 VAC), 50 to 60 Hz | Fan modules | Integrated fans, not field-replaceable |
| Airflow | Front to rear, cold aisle to hot aisle (I/O side) | Noise | 56 dBA @ 25C; 74 dBA at highest system performance |
| Dimensions (H x W x D) | 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) | Form factor (rack units) | 1RU |
| Rack mountable | Fixed mount brackets included (2-post); mount rails optional (4-post EIA-310-D rack) | Weight | 7.3 kg (16.1 lb) with 2 SSDs |
| Temperature: operating | 0°C to 40°C (32°F to 104°F) | Temperature: nonoperating | -20°C to 65°C (-4°F to 149°F) |
| Humidity: operating | 10 to 85% noncondensing | Humidity: nonoperating | 5 to 95% noncondensing |
| Altitude: operating | 10,000 ft (max) | Altitude: nonoperating | 40,000 ft (max) |
| Regulatory compliance | CE markings per directives 2004/108/EC and 2006/108/EC | Safety certifications | UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1, GB4943 |
| EMC: emissions | 47CFR Part 15 Class A (FCC Class A), AS/NZS CISPR22 Class A, CISPR22 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A, EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN300386, TCVN7189 | EMC: immunity | EN55024, CISPR24, EN300386, KN24, TVCN 7317, EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6, EN-61000-4-8, EN61000-4-11 |
| Supported SFPs (fixed ports) | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD; first supported in Threat Defense 6.2 / ASA 9.12 | Package contents | Chassis, RJ-45 to DB-9 console cable, one country-specific power cord, two rack-mount brackets, ground lug kit; SFPs and cable management brackets only when ordered |
| Supply chain assurance | Cisco Trust Anchor Technologies |
Get More Information
Need pricing, stock, or shipping details for the FPR2110-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which spare PID replaces a failed FPR2110-ASA-K9 chassis?
-
How much memory does FPR2110-ASA-K9 have?
-
Which safety and EMC standards does FPR2110-ASA-K9 meet?
-
What are the AC input and efficiency ratings of FPR2110-ASA-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Our CTO asked where we got the hardware — now the whole org is buying from Layer23.
We’ve shipped sensitive equipment ourselves. Layer23 packs better than most.
Anyone weighing the risk of ordering from Layer23 — go for it.
Don’t make it angry… it handles traffic load well. Good firewall.
We prefer the ASA image for legacy compatibility. Stable platform. Throughput is good.