FPR2120-NGFW-K9 – 3.4G NGFW Firewall – 12x1G RJ45 4x1G SFP – Threat Defense
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR2120-NGFW-K9 Description
The FPR2120-NGFW-K9 is a Cisco Firepower 2100 Series NGFW appliance running Threat Defense software for branch and network-edge firewalls. The 1RU appliance delivers 3.4 Gbps of FW + AVC + IPS throughput and 1.5 million concurrent sessions with AVC, with twelve Gigabit RJ-45 ports, four 1G SFP ports and 3,500 VPN peers. The chassis has no network module bay, and its single 250W AC supply is integrated with no redundant option.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR2120-NGFW-K9 |
|
Product type |
Cisco Firepower 2120 NGFW firewall appliance |
|
Security software role |
Cisco Firepower Threat Defense / NGFW |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
12 x 10M/100M/1GBASE-T RJ-45 and 4 x 1G SFP |
|
Network module support |
No network module bay |
|
Management interface |
1 x 10M/100M/1GBASE-T RJ-45 |
|
Storage |
1 x 100 GB SSD installed and 1 spare slot for MSP |
|
Internal power input |
Single integrated 250W AC power supply |
|
NGFW throughput |
3.4 Gbps |
|
IPS throughput |
3.5 Gbps |
|
Concurrent sessions with AVC |
1.5 million |
Product Performance
Key Features
Twelve 10M/100M/1GBASE-T RJ-45 ports and four 1G SFP ports are built in. With no network module bay, the interface count stays at 16.
Threat Defense runs at 3.4 Gbps with FW + AVC + IPS enabled, handles 18,000 new connections per second with AVC, and sustains 1.2 Gbps of IPsec VPN across 3,500 peers.
The 250W AC supply is built into the chassis and the fans are fixed. Neither can be swapped in the field, and no second supply can be added.
Application Scenarios
At a branch office, the appliance sits between the WAN router and the LAN switches, with Gigabit RJ-45 ports facing the switches and 1G SFP ports for fiber handoff from the provider.
A regional office can terminate site-to-site and remote-user tunnels on the appliance, which supports 3,500 VPN peers at 1.2 Gbps of IPsec throughput.
For a perimeter with a few Gbps of traffic, the appliance runs application visibility and intrusion prevention together at 3.4 Gbps without a separate IPS box.
Product Comparison
|
Parameter |
FPR2120-NGFW-K9 | |||
|---|---|---|---|---|
|
Stateful inspection throughput (ASA) |
Not applicable |
6 Gbps |
Not applicable |
Not applicable |
|
Throughput: FW + AVC + IPS |
3.4 Gbps |
Not applicable |
2.6 Gbps |
5.4 Gbps |
|
Throughput: IPS |
3.5 Gbps |
Not applicable |
2.6 Gbps |
5.4 Gbps |
|
IPsec VPN throughput |
1.2 Gbps |
Not applicable |
950 Mbps |
1.9 Gbps |
|
Maximum concurrent sessions, with AVC |
1.5 million |
Not applicable |
1 million |
2 million |
|
Maximum VPN peers |
3,500 |
3,500 |
1,500 |
7,500 |
|
Interfaces |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1/10G SFP+ |
|
Network module |
No network module bay |
No network module bay |
No network module bay |
1 network module bay |
|
Power supply configuration |
Single integrated 250W AC |
Single integrated 250W AC |
Single integrated 250W AC |
One 400W AC included; second 400W AC or 350W DC optional |
FPR2120-NGFW-K9 and FPR2120-ASA-K9 are the same Firepower 2120 chassis, but the NGFW PID runs Threat Defense at 3.4 Gbps of FW + AVC + IPS, while FPR2120-ASA-K9 runs Cisco ASA at 6 Gbps of stateful inspection, so a site with ASA policies needs the ASA PID. Traffic below 2.6 Gbps of inspected throughput fits FPR2110-NGFW-K9, which keeps the same 12 RJ-45 and four 1G SFP ports but supports 1,500 VPN peers instead of 3,500. Uplinks that need 10G SFP+, a network module bay, a second power supply (the 2120 has one fixed 250W supply) or 5.4 Gbps of inspected throughput call for FPR2130-NGFW-K9.
Ordering Checklist
- Threat Defense subscription: Add L-FPR2120T-TMC= and pick a 1, 3 or 5 year term (L-FPR2120T-TMC-1Y, -3Y or -5Y). Only the Base license comes with the appliance; IPS, Malware Defense and URL Filtering stay unlicensed without a subscription.
- SFP optics: Order 1G SFP transceivers for the four fixed SFP ports (Ethernet 1/13 to 1/16). SFP transceivers ship in the box only when ordered with the system.
- Rack mounting: Two 2-post brackets are included; add FPR2K-SLIDE-RAILS for a 4-post rack. The included brackets do not fit a 4-post rack.
- Malware Storage Pack: Add FPR-MSP-SSD for the second SSD slot, which is reserved for it. Slot 2 stays empty unless the pack is added.
- Power cord: Select a country-specific cord such as CAB-AC, CAB-ACE or CAB-ACA, and order CAB-ACR, CAB-C13-ACB or CAB-JPN with the system for Argentina, Brazil or Japan. Orders to those three countries must include the matching cord, and the single power supply cannot be added to or replaced in the field.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR2120T-TMC= |
Cisco Firepower 2120 Threat Defense Threat, Malware, and URL license combination |
|
L-FPR2120T-TMC-1Y |
Cisco Firepower 2120 Threat Defense Threat, Malware, and URL 1-year subscription |
|
L-FPR2120T-TMC-3Y |
Cisco Firepower 2120 Threat Defense Threat, Malware, and URL 3-year subscription |
|
L-FPR2120T-TMC-5Y |
Cisco Firepower 2120 Threat Defense Threat, Malware, and URL 5-year subscription |
|
FPR2K-SSD100= |
SSD spare for Firepower 2110 and 2120 |
|
FPR-MSP-SSD= |
Malware Storage Pack SSD spare |
|
FPR2K-CBL-MGMT= |
Cable management brackets spare |
|
FPR2K-RM-BRKT= |
Rack-mount brackets spare |
|
FPR2K-SLIDE-RAILS= |
Slide rail kit spare |
|
Cisco-listed fixed-port 1G SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port 1G SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port 1G SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port 1G SFP option for Secure Firewall 2100 | |
|
Cisco-listed fixed-port 1G SFP option for Secure Firewall 2100 |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR2120-NGFW-K9 | Product type | Cisco Firepower 2120 NGFW firewall appliance |
| Firewall model | Firepower 2120 | Security software role | Cisco Firepower Threat Defense / NGFW |
| Rack units | 1RU rack mount | Dimensions | 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
| Fixed RJ-45 ports | 12 x 10M/100M/1GBASE-T | Fixed SFP ports | 4 x 1G SFP |
| Maximum Ethernet interfaces | 16 total Ethernet ports | Network module bay | No network module bay |
| Management port | 1 x 10M/100M/1GBASE-T RJ-45 | Console port | 1 x RJ-45 console |
| USB port | 1 x USB 2.0 Type-A | SSD storage | 1 x 100 GB SSD installed; second slot reserved for MSP |
| Default power supply | Single integrated 250W AC power supply | Power redundancy | No redundant PSU option on 2120 |
| System power | 100/240V AC 1.9 A at 100 VAC | AC maximum input current | Less than 2.7A at 100V |
| AC input frequency | 50 to 60 Hz | Fan design | Fixed fans; not field-replaceable |
| Mounting | 2-post fixed brackets included; 4-post mount rails optional | Weight | 7.3 kg (16.1 lb) with 2 SSDs |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 10 to 85% noncondensing |
| Operating altitude | 10000 ft maximum | Firewall throughput | 6 Gbps |
| NGFW throughput | 3.4 Gbps | FW + AVC throughput | 3.4 Gbps |
| FW + AVC + IPS throughput | 3.4 Gbps | IPS throughput | 3.5 Gbps |
| TLS throughput | 475 Mbps | Concurrent sessions with AVC | 1.5 million |
| New connections with AVC | 18000 per second | IPsec VPN throughput | 1.2 Gbps |
| Maximum VPN peers | 3500 | Local management | Cisco Firepower Device Manager supported |
| Centralized management | Firewall Management Center or Cisco Defense Orchestrator | High availability | Active/standby |
| Smart Licensing | Base license included automatically; optional feature licenses managed through Smart Software Licensing | TMC license PID | L-FPR2120T-TMC= |
| TMC term options | L-FPR2120T-TMC-1Y, L-FPR2120T-TMC-3Y, L-FPR2120T-TMC-5Y | Fixed SFP release baseline | Threat Defense 6.2 / ASA 9.12 |
| Supported fixed 1G SFPs | GLC-TE, GLC-SX-MMD, GLC-LH-SMD, GLC-EX-SMD, GLC-ZX-SMD |
Get More Information
Need pricing, stock, or shipping details for the FPR2120-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
How much memory does FPR2120-NGFW-K9 have?
-
Which spare PID replaces a failed FPR2120-NGFW-K9 chassis?
-
What AC input does FPR2120-NGFW-K9 need?
-
What TLS inspection rate does FPR2120-NGFW-K9 reach?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Been ordering from Layer23 for multiple projects now. Reliable partner.
We’ve never received a damaged shipment from Layer23. That’s a streak worth mentioning.
I needed to match a specific configuration. Layer23 confirmed before shipping.
Good price point for NGFW. Shipping to France was quick.
FTD image pre-loaded. Snort engine runs fast on this hardware. Genuine Cisco.