FPR2130-ASA-K9 – 10G ASA Firewall – 12xRJ45 4×1/10G SFP+ – NetMod Bay
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR2130-ASA-K9 Description
The FPR2130-ASA-K9 is a Cisco Firepower 2130 ASA firewall appliance in the Firepower 2100 Series for branch, campus-edge and data center perimeters that stay on ASA software. The appliance has 10 Gbps of stateful inspection throughput, 5 Gbps of multiprotocol throughput, twelve RJ-45 ports, four 1/10G SFP+ ports, one network module bay and 7,500 VPN peers. Threat Defense runs on a separate model number, so one unit runs either ASA or Threat Defense, not both.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR2130-ASA-K9 |
|
Product type |
Cisco Firepower 2130 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
12 x RJ-45 10M/100M/1GBASE-T and 4 x 1/10G SFP+ |
|
Network module bay |
One front network module slot |
|
Optional network modules |
10G SFP+ and 1/10G fail-to-wire options |
|
Management interface |
1 x 10M/100M/1GBASE-T RJ-45 |
|
Storage |
1 x 200 GB SSD installed and 1 spare slot for MSP |
|
Power supply design |
Ships with one 400W AC power supply; dual AC optional |
|
Default power supply |
FPR2K-PWR-AC-400 400W AC included; second AC supply optional |
|
Stateful inspection firewall throughput |
10 Gbps |
|
ASA multiprotocol firewall throughput |
5 Gbps |
Product Performance
Key Features
Four SFP+ ports sit beside twelve Gigabit RJ-45 ports, so 10G fiber uplinks need no module.
One front bay takes 1G or 10G SFP+ modules and fail-to-wire modules, raising the chassis to as many as 24 Ethernet ports.
Two contexts are included and add-on licenses raise the ceiling to 30, which lets one chassis serve several isolated policy domains.
ASA software supports both failover modes, so two appliances can share load or hold one in reserve.
A 400W AC supply ships in the chassis. A second AC unit or 350W DC supplies provide 1+1 redundancy, and AC and DC cannot be mixed.
The 2130 is the only Firepower 2100 model certified for NEBS, which extends operating temperature and altitude limits for telecom-style sites.
Application Scenarios
At a campus edge, the appliance terminates the internet or WAN uplinks on its 10G SFP+ ports and applies ASA stateful inspection at 10 Gbps in front of the core.
A hosting or shared-services network can split one appliance into virtual firewalls, using the 2 included security contexts and licenses for up to 30.
A regional hub can terminate up to 7,500 VPN peers at 1 Gbps of IPsec throughput, with active/active or active/standby pairing for failover.
Product Comparison
|
Parameter |
FPR2130-ASA-K9 | |||
|---|---|---|---|---|
|
Stateful inspection throughput |
10 Gbps |
Not applicable |
6 Gbps |
20 Gbps |
|
Multiprotocol throughput |
5 Gbps |
Not applicable |
3 Gbps |
10 Gbps |
|
IPsec VPN throughput |
1 Gbps |
Not applicable |
700 Mbps |
2 Gbps |
|
Maximum concurrent sessions |
2 million |
Not applicable |
1.5 million |
3 million |
|
Maximum VPN peers |
7,500 |
7,500 |
3,500 |
10,000 |
|
Security contexts |
2 included; 30 maximum |
Not applicable |
2 included; 25 maximum |
2 included; 40 maximum |
|
Interfaces |
12 x RJ-45, 4 x 1/10G SFP+ |
12 x RJ-45, 4 x 1/10G SFP+ |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1/10G SFP+ |
|
Network module |
1 network module bay |
1 network module bay |
No network module bay |
1 network module bay |
|
Power supply configuration |
One 400W AC included; second 400W AC or 350W DC optional |
One 400W AC included; second 400W AC or 350W DC optional |
Single integrated 250W AC |
Two 400W AC included; 350W DC optional |
FPR2130-ASA-K9 and FPR2130-NGFW-K9 are the same Firepower 2130 chassis, but this PID runs Cisco ASA at 10 Gbps of stateful inspection and up to 30 security contexts, while FPR2130-NGFW-K9 runs Threat Defense, so ASA policies and multi-context designs need this PID. FPR2120-ASA-K9 fits traffic up to 6 Gbps with 1G SFP uplinks, 25 contexts at most and no network module bay or second power supply. Beyond 10 Gbps, or for 40 contexts and 2 Gbps of IPsec VPN, FPR2140-ASA-K9 ships with two 400W AC supplies, where this model ships with one and takes a second FPR2K-PWR-AC-400.
Ordering Checklist
- ASA license: Order L-FPR2100-ASA= (Essentials, no charge) and a Smart Software Licensing account. Essentials is the minimum license, and it still has to be registered to an account.
- Security contexts: Add L-FPR2K-ASASC-5= or L-FPR2K-ASASC-10= if more than the 2 included contexts are needed. Context licenses stack on top of the 2 included, up to 30 on this model.
- Strong encryption: Add L-FPR2K-ENC-K9= only if the Smart Account does not already hold strong-encryption authorization. The 3DES/AES license is needed only on accounts without that authorization.
- Network module: Choose one of FPR2K-NM-8X1G, FPR2K-NM-8X10G, FPR2K-NM-8X1G-F, FPR2K-NM-6X1SX-F, FPR2K-NM-6X10SR-F or FPR2K-NM-6X10LR-F, or FPR2K-NM-BLANK for the bay. The 2130 has one module bay; the fail-to-wire modules pair ports 1 with 2 and 3 with 4.
- Power supply: Add a second FPR2K-PWR-AC-400, or FPR2K-PWR-DC-350 if the site uses -48 to -60 V DC. One 400W AC supply ships by default, and AC and DC supplies cannot be mixed in one chassis.
- Power cord: Select a country-specific cord per supply, and order CAB-ACR, CAB-C13-ACB or CAB-JPN with the system for Argentina, Brazil or Japan. Orders to those three countries must include the matching cord.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR2100-ASA= |
Cisco Firepower 2100 ASA Essentials license |
|
L-FPR2K-ASASC-5= |
Cisco Firepower 2100 add-on 5 security context license |
|
L-FPR2K-ASASC-10= |
Cisco Firepower 2100 add-on 10 security context license |
|
L-FPR2K-ENC-K9= |
Cisco Firepower 2100 ASA strong encryption license when the account is not already export-authorized |
|
FPR2K-NM-8X10G |
Firepower 2100 8-port 10G SFP+ network module |
|
FPR2K-NM-8X1G |
Firepower 2100 8-port 1G network module |
|
FPR2K-NM-6X10SR-F |
Firepower 2100 6-port 10G SR fail-to-wire network module |
|
FPR2K-NM-6X10LR-F |
Firepower 2100 6-port 10G LR fail-to-wire network module |
|
FPR2K-PWR-AC-400= |
400W AC power supply spare for Firepower 2130 and 2140 |
|
FPR2K-PWR-DC-350= |
350W DC power supply spare for Firepower 2130 and 2140 |
|
FPR2K-FAN= |
Fan tray spare for Firepower 2130 and 2140 |
|
FPR2K-SSD200= |
200 GB SSD spare for Firepower 2130 and 2140 |
|
FPR-MSP-SSD= |
Malware Storage Pack SSD option |
|
FPR2K-SLIDE-RAILS= |
Slide rail kit spare |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR2130-ASA-K9 | Product type | Cisco Firepower 2130 ASA firewall appliance |
| Firewall model | Firepower 2130 | Security software role | Cisco ASA software |
| Rack units | 1RU rack mount | Dimensions | 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
| Fixed RJ-45 ports | 12 x 10M/100M/1GBASE-T | Fixed SFP+ ports | 4 x 1/10G SFP+ |
| Maximum Ethernet interfaces | Up to 24 total Ethernet ports with network module | Network module bay | One front network module slot |
| Network module options | 10G SFP+ and 1/10G fail-to-wire options | Management port | 1 x 10M/100M/1GBASE-T RJ-45 |
| Console port | 1 x RJ-45 console | USB port | 1 x USB 2.0 Type-A |
| Airflow | Front to rear; cold aisle to hot aisle through the I/O side | SSD storage | 1 x 200 GB SSD installed; second slot reserved for MSP |
| Power supply included | One 400W AC power supply | Power supply options | Dual 400W AC optional; single or dual 350W DC optional |
| Power redundancy | 1+1 AC or DC with dual supplies | AC input voltage | 100 to 240V AC |
| AC maximum current | Less than 6A at 100V | AC maximum output power | 400W |
| AC input frequency | 50 to 60 Hz | DC input voltage | -48V to -60VDC |
| DC maximum output power | 350W | Fan design | 1 hot-swappable fan module with 4 fans |
| Mounting | 4-post EIA-310-D rack; optional 2-post brackets | Weight | 8.8 kg (19.4 lb) with 1 power supply, 1 network module, 1 fan module, and 2 SSDs |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 10 to 85% noncondensing |
| Operating altitude | 10000 ft maximum | Stateful inspection firewall throughput | 10 Gbps |
| Multiprotocol firewall throughput | 5 Gbps | Concurrent firewall connections | 2 million |
| New connections per second | 40000 | IPsec VPN throughput | 1 Gbps |
| Maximum VPN peers | 7500 | Security contexts | 2 included; 30 maximum |
| High availability | Active/active and active/standby | Local ASA management | Adaptive Security Device Manager |
| Centralized ASA management | Cisco Security Manager or Cisco Defense Orchestrator | ASA Essentials license PID | L-FPR2100-ASA= |
| Context license options | L-FPR2K-ASASC-5= and L-FPR2K-ASASC-10= | Strong encryption PID | L-FPR2K-ENC-K9= |
| Network module release check | Verify firmware package and ASA compatibility for selected module |
Get More Information
Need pricing, stock, or shipping details for the FPR2130-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What operating temperature range applies to FPR2130-ASA-K9 under NEBS conditions?
-
How much output do two power supplies give FPR2130-ASA-K9, and do they stay redundant?
-
Does switching a fail-to-wire network module into bypass interrupt traffic on FPR2130-ASA-K9?
-
Can a network module be hot-swapped in FPR2130-ASA-K9?
-
Can copper SFPs fill both rows of the FPR2K-NM-8X10G module in FPR2130-ASA-K9?
-
How is a DC power supply wired in FPR2130-ASA-K9?
-
What circuit protection does FPR2130-ASA-K9 need on its power feed?
-
How is an AC power supply removed from FPR2130-ASA-K9?
-
Which spare PIDs cover the chassis and SSD of FPR2130-ASA-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Everything about this experience makes me want to do it again.
Layer23 made me a believer in alternative sourcing. Same product, better terms.
Documentation arrived in a separate envelope inside the box. Professional touch.
VPN concentrator performance is excellent. We have 500+ remote users connected.
Commercial invoice was accurate. Customs cleared in 24 hours.