FPR2120-ASA-K9 – 6G ASA Firewall – 12xRJ45 4x1G SFP – 1RU 2120
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR2120-ASA-K9 Description
The FPR2120-ASA-K9 is a Cisco Firepower 2100 Series 1RU firewall appliance running ASA software for internet-edge and VPN sites. The appliance has twelve RJ-45 and four 1G SFP fixed ports, 6 Gbps of stateful inspection firewall throughput, 1.5 million concurrent firewall connections and up to 3500 VPN peers. The appliance has no network module bay and a single integrated 250W AC supply without redundancy.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR2120-ASA-K9 |
|
Product type |
Cisco Firepower 2120 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
12 x RJ-45 10M/100M/1GBASE-T and 4 x 1G SFP |
|
Network module support |
No network module bay |
|
Management interface |
1 x 10M/100M/1GBASE-T RJ-45 |
|
Storage |
1 x 100 GB SSD installed and 1 spare slot for MSP |
|
Internal power input |
Single integrated 250W AC power supply |
|
Stateful inspection firewall throughput |
6 Gbps |
|
ASA multiprotocol firewall throughput |
3 Gbps |
|
Security contexts |
2 included; 25 maximum |
Product Performance
Key Features
Stateful inspection throughput is 6 Gbps on 1500B UDP traffic and multiprotocol throughput is 3 Gbps. Concurrent connection capacity of 1.5 million supports sites with many simultaneous sessions.
Twelve RJ-45 10M/100M/1GBASE-T ports and four 1G SFP ports make up the data plane. Without a network module bay, the port count and speeds are fixed.
Two security contexts are included, with up to 25 supported on the Firepower 2100 ASA license path. Multi-context designs size against that ceiling.
Application Scenarios
A mid-size office whose cabling plan needs twelve Gigabit copper ports and four 1G SFP uplinks can use the appliance as its ASA internet-edge firewall without adding a module.
A headquarters or regional site that terminates a large mobile workforce can use the appliance’s support for up to 3500 VPN peers on ASA software.
A shared-services or multi-tenant network can divide one appliance into security contexts, with two included and a maximum of 25.
Product Comparison
|
Parameter |
FPR2120-ASA-K9 | |||
|---|---|---|---|---|
|
Stateful inspection firewall throughput |
6 Gbps |
Not applicable |
3 Gbps |
10 Gbps |
|
Stateful inspection firewall throughput (multiprotocol) |
3 Gbps |
Not applicable |
1.5 Gbps |
5 Gbps |
|
Concurrent firewall connections |
1.5 million |
Not applicable |
1 million |
2 million |
|
New connections per second |
28000 |
Not applicable |
18000 |
40000 |
|
IPsec VPN throughput (450B UDP L2L test) |
700 Mbps |
Not applicable |
500 Mbps |
1 Gbps |
|
Maximum VPN peers |
3500 |
3500 |
1500 |
7500 |
|
Security contexts (included; maximum) |
2; 25 |
Not applicable |
2; 25 |
2; 30 |
|
Network interfaces |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 10G SFP+ |
|
Network modules |
No module bay |
No module bay |
No module bay |
1 |
FPR2120-ASA-K9 and FPR2120-NGFW-K9 are the same Firepower 2120 1RU hardware with 12 RJ-45 and four 1G SFP ports, split only by software: ASA on FPR2120-ASA-K9, Firewall Threat Defense on FPR2120-NGFW-K9. On ASA, FPR2120-ASA-K9 is rated 6 Gbps stateful inspection, 1.5 million concurrent connections, 3500 VPN peers and a 25-context maximum. Sites that stay under 3 Gbps, 1 million connections and 1500 peers can use FPR2110-ASA-K9, which has the same ports. Above 6 Gbps, or where a network module bay is needed, FPR2130-ASA-K9 offers 10 Gbps, 2 million connections, 7500 peers and four 10G SFP+ ports plus one module bay.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR2100-ASA= |
Cisco Firepower 2100 ASA Essentials license |
|
L-FPR2K-ASASC-5= |
Cisco Firepower 2100 add-on 5 security context license |
|
L-FPR2K-ASASC-10= |
Cisco Firepower 2100 add-on 10 security context license |
|
L-FPR2K-ENC-K9= |
Cisco Firepower 2100 ASA strong encryption license when the account is not already export-authorized |
|
FPR2K-SSD100= |
SSD spare for Firepower 2110 and 2120 |
|
FPR-MSP-SSD= |
Malware Storage Pack SSD spare |
|
FPR2K-CBL-MGMT= |
Cable management brackets spare |
|
FPR2K-RM-BRKT= |
Rack-mount brackets spare |
|
FPR2K-SLIDE-RAILS= |
Slide rail kit spare |
|
Cisco-listed fixed-port SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port SFP option for Secure Firewall 2100 |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR2120-ASA-K9 | Product type | Cisco Firepower 2120 ASA firewall appliance |
| Firewall model | Firepower 2120 | Security software role | Cisco ASA software |
| Rack units | 1RU rack mount | Dimensions | 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
| Fixed RJ-45 ports | 12 x 10M/100M/1GBASE-T | Fixed SFP ports | 4 x 1G SFP |
| Maximum Ethernet interfaces | 16 total Ethernet ports | Network module bay | No network module bay |
| Management port | 1 x 10M/100M/1GBASE-T RJ-45 | Console port | 1 x RJ-45 console |
| USB port | 1 x USB 2.0 Type-A | Airflow | Cold aisle to hot aisle through the I/O side |
| SSD storage | 1 x 100 GB SSD installed; second slot reserved for MSP | Default power supply | Single integrated 250W AC power supply |
| Power redundancy | No redundant PSU option on 2120 | System power | 100/240V AC 1.9 A at 100 VAC |
| AC input frequency | 50 to 60 Hz | Fan design | Fixed fan design; not field-replaceable |
| Mounting | 2-post fixed brackets included; 4-post slide rails optional | Weight | 7.3 kg (16.1 lb) |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 10 to 85% noncondensing |
| Operating altitude | 10000 ft maximum | Stateful inspection firewall throughput | 6 Gbps |
| Multiprotocol firewall throughput | 3 Gbps | Concurrent firewall connections | 1.5 million |
| New connections per second | 28000 | IPsec VPN throughput | 700 Mbps |
| Maximum VPN peers | 3500 | Security contexts | 2 included; 25 maximum |
| High availability | Active/active and active/standby | Local ASA management | Adaptive Security Device Manager |
| Centralized ASA management | Cisco Security Manager or Cisco Defense Orchestrator | ASA Essentials license PID | L-FPR2100-ASA= |
| Context license options | L-FPR2K-ASASC-5= and L-FPR2K-ASASC-10= | Fixed SFP release baseline | Threat Defense 6.2 / ASA 9.12 |
| Supported fixed 1G SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
Get More Information
Need pricing, stock, or shipping details for the FPR2120-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
How much memory does FPR2120-ASA-K9 have?
-
Which spare PID replaces a failed FPR2120-ASA-K9 chassis?
-
What operating environment does FPR2120-ASA-K9 support?
-
What AC input does FPR2120-ASA-K9 need?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:












Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.

Layer23 is what every alternative-channel vendor should aspire to be.
Even our legal team was comfortable with the purchase terms.
Layer23 has set a high benchmark for what we expect from our suppliers.
Good rack mount kit included. Setup was standard.
It’s a magical place… dealing with Layer23. Smooth transaction.