FPR2120-ASA-K9 – 6G ASA Firewall – 12xRJ45 4x1G SFP – 1RU 2120
3/mo Solds
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR2120-ASA-K9 Description
FPR2120-ASA-K9 is a Cisco Firepower 2120 ASA firewall appliance in the Firepower 2100 Series for ASA-based firewall edge, VPN, and security-services deployments. It is a 1RU rack-mount platform with twelve RJ-45 10M/100M/1GBASE-T data ports, four fixed 1G SFP ports, a dedicated RJ-45 management interface, and no network module bay. Cisco lists the Firepower 2120 ASA platform with 6 Gbps stateful inspection firewall throughput, 3 Gbps ASA multiprotocol firewall throughput, 1.5 million concurrent firewall connections, IPsec VPN support, and local ASDM or centralized Cisco Security Manager / Cisco Defense Orchestrator management options.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR2120-ASA-K9 |
|
Product type |
Cisco Firepower 2120 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
12 x RJ-45 10M/100M/1GBASE-T and 4 x 1G SFP |
|
Network module support |
No network module bay |
|
Management interface |
1 x 10M/100M/1GBASE-T RJ-45 |
|
Storage |
1 x 100 GB SSD installed and 1 spare slot for MSP |
|
Internal power input |
Single integrated 250W AC power supply |
|
Stateful inspection firewall throughput |
6 Gbps |
|
ASA multiprotocol firewall throughput |
3 Gbps |
|
Security contexts |
2 included; 25 maximum |
Product Performance
Key Features
Cisco lists FPR2120-ASA-K9 as the Firepower 2120 1RU ASA appliance PID, so procurement should keep it separate from the FPR2120-NGFW-K9 Threat Defense order path.
The appliance uses twelve fixed RJ-45 10M/100M/1GBASE-T data ports plus four fixed 1G SFP ports, giving the 2120 a fixed 16-port Ethernet layout.
The 2120 ASA entry raises stateful throughput, multiprotocol throughput, firewall connection scale, new connections per second, VPN throughput, and VPN peer count above the 2110 values.
Cisco documents network module support as none for Firepower 2120, so orders that require modular 10G or fail-to-wire expansion should move to a 2130 or 2140 design.
The 2110 and 2120 use a fixed AC power supply without appliance-level redundant power, making site power and spare chassis planning part of the BOM review.
The ASA license set uses the Firepower 2100 Essentials license path, with 2 included contexts and a 25-context maximum for the Firepower 2120.
Application Scenarios
Specify FPR2120-ASA-K9 when the operating model remains Cisco ASA and the sizing document needs the 2120 values for throughput, connection scale, VPN peers, or context capacity.
Place this SKU in projects where twelve copper Gigabit ports and four 1G SFP uplinks fit the cabling plan without a separate network module.
Select the ASA PID when rule management, support records, and licensing are tied to ASA operation; switch to FPR2120-NGFW-K9 only when the approved design changes to Threat Defense.
Product Comparison
|
Parameter |
FPR2120-ASA-K9 | |||
|---|---|---|---|---|
|
Cisco PID description |
Firepower 2120 appliance 1RU ASA |
Firepower 2120 appliance 1RU NGFW |
Firepower 2110 appliance 1RU ASA |
Firepower 2130 appliance 1RU with one network module bay ASA |
|
Firewall model |
Firepower 2120 |
Firepower 2120 |
Firepower 2110 |
Firepower 2130 |
|
Security software role |
Cisco ASA software |
Firewall Threat Defense software |
Cisco ASA software |
Cisco ASA software |
|
Form factor |
1RU |
1RU |
1RU |
1RU |
|
Fixed data interfaces |
12 x RJ-45 and 4 x 1G SFP |
12 x RJ-45 and 4 x 1G SFP |
12 x RJ-45 and 4 x 1G SFP |
12 x RJ-45 and 4 x 10G SFP+ |
|
Network module support |
No network module bay |
No network module bay |
No network module bay |
One network module bay |
|
ASA stateful inspection throughput |
6 Gbps |
Threat Defense software role |
3 Gbps |
10 Gbps |
|
ASA multiprotocol throughput |
3 Gbps |
Threat Defense software role |
1.5 Gbps |
5 Gbps |
|
Concurrent firewall connections |
1.5 million |
Threat Defense software role |
1 million |
2 million |
|
New connections per second |
28000 |
Threat Defense software role |
18000 |
40000 |
|
IPsec VPN throughput |
700 Mbps |
Threat Defense software role |
500 Mbps |
1 Gbps |
|
Maximum VPN peers |
3500 |
3500 |
1500 |
7500 |
|
Security contexts |
2 included; 25 maximum |
Threat Defense software role |
2 included; 25 maximum |
2 included; 30 maximum |
|
Internal power input |
Single integrated 250W AC |
Single integrated 250W AC |
Single integrated 250W AC |
Single 400W AC; dual AC optional; DC optional |
- In a FPR2120-ASA-K9 vs FPR2120-NGFW-K9 comparison, the hardware model and fixed interface layout match, but Cisco separates the ASA appliance PID from the NGFW appliance PID.
- The FPR2120-ASA-K9 difference from FPR2110-ASA-K9 is the ASA capacity row: the 2120 increases stateful throughput, multiprotocol throughput, concurrent connections, new connections per second, VPN throughput, and VPN peer count.
- For FPR2120-ASA-K9 vs FPR2130-ASA-K9, the comparison changes both scale and hardware expansion because the 2130 adds fixed 10G SFP+ ports, one network module bay, and higher ASA values.
- Buyers deciding which model to choose should first confirm ASA versus Threat Defense, then match the required 2100 Series performance row, SFP speed, and network module requirement.
Selection Guide
1. Confirm the ASA appliance PID
Choose FPR2120-ASA-K9 when the approved firewall design names Cisco ASA on a Firepower 2120 appliance rather than a Threat Defense orderable identity.
2. Size against the 2120 ASA values
Select this SKU when 6 Gbps stateful inspection throughput, 3 Gbps multiprotocol throughput, 1.5 million concurrent connections, or 3500 VPN peers match the sizing file.
3. Keep the fixed 1G SFP boundary clear
Use the 2120 when the optical handoff is 1G SFP; move to FPR2130-ASA-K9 only if the design also requires the 2130 hardware row with fixed SFP+ ports or a network module bay.
4. Treat security contexts as a license item
Verify whether the included 2 contexts are enough, because expansion toward the 25-context maximum requires the correct Firepower 2100 ASA context entitlement.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Exact appliance PID |
Confirm FPR2120-ASA-K9 rather than FPR2120-NGFW-K9 |
Cisco lists separate ASA and NGFW PIDs for the same 2120 hardware model |
|
ASA license scope |
Include the Firepower 2100 ASA Essentials license and any needed context license |
ASA feature authorization depends on Smart Account entitlements |
|
Security contexts |
Decide whether 2 included contexts are enough or whether the design needs expansion toward 25 contexts |
The 2120 context ceiling differs from the 2130 and 2140 values |
|
Fixed SFP optics |
Match the four fixed SFP ports to Cisco-listed 1G SFP transceivers |
Unsupported optics can create installation and support delays |
|
Expansion boundary |
Confirm that no network module bay is required |
Firepower 2120 does not support a network module slot |
|
Power and rack plan |
Confirm AC input, regional power cord, 2-post brackets, optional slide rails, and fixed power design |
The 2120 does not add redundant PSU protection through spare power modules |
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR2100-ASA= |
Cisco Firepower 2100 ASA Essentials license |
|
L-FPR2K-ASASC-5= |
Cisco Firepower 2100 add-on 5 security context license |
|
L-FPR2K-ASASC-10= |
Cisco Firepower 2100 add-on 10 security context license |
|
L-FPR2K-ENC-K9= |
Cisco Firepower 2100 ASA strong encryption license when the account is not already export-authorized |
|
FPR2K-SSD100= |
SSD spare for Firepower 2110 and 2120 |
|
FPR-MSP-SSD= |
Malware Storage Pack SSD spare |
|
FPR2K-CBL-MGMT= |
Cable management brackets spare |
|
FPR2K-RM-BRKT= |
Rack-mount brackets spare |
|
FPR2K-SLIDE-RAILS= |
Slide rail kit spare |
|
GLC-TE |
Cisco-listed fixed-port SFP option for Secure Firewall 2100 |
|
GLC-SX-MMD |
Cisco-listed fixed-port SFP option for Secure Firewall 2100 |
|
GLC-LH-SMD |
Cisco-listed fixed-port SFP option for Secure Firewall 2100 |
|
GLC-EX-SMD |
Cisco-listed fixed-port SFP option for Secure Firewall 2100 |
|
GLC-ZX-SMD |
Cisco-listed fixed-port SFP option for Secure Firewall 2100 |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR2120-ASA-K9 | Product Type | Cisco Firepower 2120 ASA firewall appliance |
| Firewall Model | Firepower 2120 | Security Software Role | Cisco ASA software |
| Form Factor | 1RU rack mount | Chassis Dimensions | 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
| Fixed RJ-45 Ports | 12 x 10M/100M/1GBASE-T | Fixed SFP Ports | 4 x 1G SFP |
| Maximum Ethernet Interfaces | 16 total Ethernet ports | Network Module Bay | No network module bay |
| Management Port | 1 x 10M/100M/1GBASE-T RJ-45 | Console Port | 1 x RJ-45 console |
| USB Port | 1 x USB 2.0 Type-A | Airflow | Cold aisle to hot aisle through the I/O side |
| Storage | 1 x 100 GB SSD installed; second slot reserved for MSP | Power Supply | Single integrated 250W AC power supply |
| Power Redundancy | No redundant PSU option on 2120 | System Power | 100/240V AC 1.9 A at 100 VAC |
| AC Frequency | 50 to 60 Hz | Fan Design | Fixed fan design; not field-replaceable |
| Rack Mounting | 2-post fixed brackets included; 4-post slide rails optional | Weight | 16.1 lb (7.3 kg) |
| Operating Temperature | 32 to 104F (0 to 40C) | Operating Humidity | 10 to 85% noncondensing |
| Operating Altitude | 10000 ft maximum | Stateful Inspection Firewall Throughput | 6 Gbps |
| Multiprotocol Firewall Throughput | 3 Gbps | Concurrent Firewall Connections | 1.5 million |
| New Connections Per Second | 28000 | IPsec VPN Throughput | 700 Mbps |
| Maximum VPN Peers | 3500 | Security Contexts | 2 included; 25 maximum |
| High Availability | Active/active and active/standby | Local ASA Management | Adaptive Security Device Manager |
| Centralized ASA Management | Cisco Security Manager or Cisco Defense Orchestrator | ASA Essentials License PID | L-FPR2100-ASA= |
| Context License Options | L-FPR2K-ASASC-5= and L-FPR2K-ASASC-10= | Fixed SFP Release Baseline | Threat Defense 6.2 / ASA 9.12 |
| Supported Fixed 1G SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
Get More Information
Need pricing, stock, or shipping details for the FPR2120-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which deployment fits FPR2120-ASA-K9?
-
Which ordering path makes FPR2120-ASA-K9 different from FPR2120-NGFW-K9?
-
Which fixed ports are built into FPR2120-ASA-K9?
-
Does FPR2120-ASA-K9 use the optional module path?
-
Why do ASA refresh threads mention FPR2120-ASA-K9?
-
Which license check belongs with FPR2120-ASA-K9?
-
Can FPR2120-ASA-K9 later run Threat Defense?
-
Which interface plan points away from FPR2120-ASA-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Layer23 is what every alternative-channel vendor should aspire to be.
Even our legal team was comfortable with the purchase terms.
Layer23 has set a high benchmark for what we expect from our suppliers.
Good rack mount kit included. Setup was standard.
It’s a magical place… dealing with Layer23. Smooth transaction.