FPR2130-NGFW-K9 – 5.4G NGFW Firewall – 12xRJ45 4×1/10G SFP+ – NetMod Bay
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR2130-NGFW-K9 Description
The FPR2130-NGFW-K9 is a Cisco Firepower 2130 NGFW appliance in the Firepower 2100 Series running Threat Defense software for campus and data center edge firewalls. The 1RU appliance delivers 5.4 Gbps of FW + AVC + IPS throughput and 2 million concurrent sessions with AVC, with twelve RJ-45 ports, four 1/10G SFP+ ports, one network module bay and 7,500 VPN peers. ASA software runs on a separate model number with the same hardware.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR2130-NGFW-K9 |
|
Product type |
Cisco Firepower 2130 NGFW firewall appliance |
|
Security software role |
Cisco Firepower Threat Defense / NGFW |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data interfaces |
12 x 10M/100M/1GBASE-T RJ-45 and 4 x 1/10G SFP+ |
|
Network module bay |
One front network module slot |
|
Optional network modules |
1G SFP, 10G SFP+, and fail-to-wire options |
|
Management interface |
1 x 10M/100M/1GBASE-T RJ-45 |
|
Storage |
1 x 200 GB SSD installed and 1 spare slot for MSP |
|
Power supply design |
Ships with one 400W AC power supply; dual AC optional |
|
Default power supply |
FPR2K-PWR-AC-400 400W AC included; second AC supply optional |
|
NGFW throughput |
5.4 Gbps |
|
Concurrent sessions with AVC |
2 million |
Product Performance
Key Features
Four SFP+ ports are built in beside twelve Gigabit RJ-45 ports, so 10G fiber handoff needs no module.
The front bay takes 1G SFP, 10G SFP+ and fail-to-wire modules, up to 24 Ethernet ports in total.
Threat Defense reaches 5.4 Gbps with FW + AVC + IPS, 760 Mbps of TLS inspection and 30,000 new connections per second with AVC.
One 400W AC supply is included. A second AC unit or 350W DC supplies add 1+1 redundancy, with no mixing of AC and DC.
A single fan module with four fans is replaceable without removing the chassis, with 3+1 fan redundancy.
The 2130 is the only Firepower 2100 model certified for NEBS, which extends operating temperature and altitude limits.
Application Scenarios
At a data center edge, the appliance connects to upstream routers over its 10G SFP+ ports and inspects traffic with application visibility and intrusion prevention at 5.4 Gbps.
A campus network can place the appliance between the core and the internet providers, using the module bay to add 1G or 10G ports as segments are added.
In an equipment room built to NEBS conditions, the 2130 runs inspection and VPN termination for up to 7,500 peers within the extended temperature and altitude limits.
Product Comparison
|
Parameter |
FPR2130-NGFW-K9 | |||
|---|---|---|---|---|
|
Stateful inspection throughput (ASA) |
Not applicable |
10 Gbps |
Not applicable |
Not applicable |
|
Throughput: FW + AVC + IPS |
5.4 Gbps |
Not applicable |
3.4 Gbps |
10.4 Gbps |
|
Throughput: IPS |
5.4 Gbps |
Not applicable |
3.5 Gbps |
10.5 Gbps |
|
IPsec VPN throughput |
1.9 Gbps |
Not applicable |
1.2 Gbps |
3.6 Gbps |
|
Maximum concurrent sessions, with AVC |
2 million |
Not applicable |
1.5 million |
3 million |
|
Maximum VPN peers |
7,500 |
7,500 |
3,500 |
10,000 |
|
Interfaces |
12 x RJ-45, 4 x 1/10G SFP+ |
12 x RJ-45, 4 x 1/10G SFP+ |
12 x RJ-45, 4 x 1G SFP |
12 x RJ-45, 4 x 1/10G SFP+ |
|
Network module |
1 network module bay |
1 network module bay |
No network module bay |
1 network module bay |
|
Power supply configuration |
One 400W AC included; second 400W AC or 350W DC optional |
One 400W AC included; second 400W AC or 350W DC optional |
Single integrated 250W AC |
Two 400W AC included; 350W DC optional |
FPR2130-NGFW-K9 and FPR2130-ASA-K9 are the same Firepower 2130 chassis, but this PID runs Threat Defense at 5.4 Gbps of FW + AVC + IPS, while FPR2130-ASA-K9 runs Cisco ASA at 10 Gbps of stateful inspection, so sites with ASA policies need the ASA PID. FPR2120-NGFW-K9 handles up to 3.4 Gbps and 3,500 VPN peers but has 1G SFP ports, no module bay and one fixed 250W supply. FPR2140-NGFW-K9 is the step up at 10.4 Gbps, 3 million AVC sessions, 3.6 Gbps of IPsec VPN and two 400W AC supplies, and the 2130 is the only 2100 model with NEBS certification.
Ordering Checklist
- Threat Defense subscription: Add L-FPR2130T-TMC= and pick a 1, 3 or 5 year term (L-FPR2130T-TMC-1Y, -3Y or -5Y). Only the Base license comes with the appliance; IPS, Malware Defense and URL Filtering stay unlicensed without a subscription.
- Network module: Choose one of FPR2K-NM-8X1G, FPR2K-NM-8X10G, FPR2K-NM-8X1G-F, FPR2K-NM-6X1SX-F, FPR2K-NM-6X10SR-F or FPR2K-NM-6X10LR-F, or FPR2K-NM-BLANK for the bay. The 2130 has one module bay; the fail-to-wire modules pair ports 1 with 2 and 3 with 4.
- Power supply: Add a second FPR2K-PWR-AC-400, or FPR2K-PWR-DC-350 if the site uses -48 to -60 V DC. One 400W AC supply ships by default, and AC and DC supplies cannot be mixed in one chassis.
- Malware Storage Pack: Add FPR-MSP-SSD for the second SSD slot, which is reserved for it. Slot 2 stays empty unless the pack is added.
- Power cord: Select a country-specific cord per supply, and order CAB-ACR, CAB-C13-ACB or CAB-JPN with the system for Argentina, Brazil or Japan. Orders to those three countries must include the matching cord.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR2130T-TMC= |
Cisco Firepower 2130 Threat Defense Threat, Malware, and URL license combination |
|
L-FPR2130T-TMC-1Y |
Cisco Firepower 2130 Threat Defense Threat, Malware, and URL 1-year subscription |
|
L-FPR2130T-TMC-3Y |
Cisco Firepower 2130 Threat Defense Threat, Malware, and URL 3-year subscription |
|
L-FPR2130T-TMC-5Y |
Cisco Firepower 2130 Threat Defense Threat, Malware, and URL 5-year subscription |
|
FPR2K-NM-8X1G |
Firepower 2100 8-port 1G SFP network module |
|
FPR2K-NM-8X10G |
Firepower 2100 8-port 10G SFP+ network module |
|
FPR2K-NM-8X1G-F |
Firepower 2100 8-port 1G copper hardware bypass network module |
|
FPR2K-NM-6X1SX-F |
Firepower 2100 6-port 1G SX fiber hardware bypass network module |
|
FPR2K-NM-6X10SR-F |
Firepower 2100 6-port 10G SR hardware bypass network module |
|
FPR2K-NM-6X10LR-F |
Firepower 2100 6-port 10G LR hardware bypass network module |
|
FPR2K-PWR-AC-400= |
400W AC power supply spare for Firepower 2130 and 2140 |
|
FPR2K-PWR-DC-350= |
350W DC power supply spare for Firepower 2130 and 2140 |
|
FPR2K-FAN= |
Fan tray spare for Firepower 2130 and 2140 |
|
FPR2K-SSD200= |
200 GB SSD spare for Firepower 2130 and 2140 |
|
FPR-MSP-SSD= |
Malware Storage Pack SSD option |
|
FPR2K-SLIDE-RAILS= |
Slide rail kit spare |
|
Cisco-listed fixed-port 10G SFP+ option for Secure Firewall 2130 and 2140 | |
|
Cisco-listed fixed-port 10G SFP+ option for Secure Firewall 2130 and 2140 | |
|
Cisco-listed fixed-port 10G SFP+ option for Secure Firewall 2130 and 2140 | |
|
Cisco-listed fixed-port 10G SFP+ option for Secure Firewall 2130 and 2140 | |
|
Cisco-listed fixed-port 10G SFP+ option for Secure Firewall 2130 and 2140 | |
|
Cisco-listed fixed-port 10G SFP+ option for Secure Firewall 2130 and 2140 | |
|
SFP-10G-LRM |
Cisco-listed fixed-port 10G SFP+ option for Secure Firewall 2130 and 2140 |
|
SFP-H10GB-CUxM |
Cisco-listed fixed-port 10G copper cable option for Secure Firewall 2130 and 2140 |
|
SFP-H10GB-ACUxM |
Cisco-listed fixed-port 10G active copper cable option for Secure Firewall 2130 and 2140 |
|
SFP-10G-AOCxM |
Cisco-listed fixed-port 10G active optical cable option for Secure Firewall 2130 and 2140 |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR2130-NGFW-K9 | Product type | Cisco Firepower 2130 NGFW firewall appliance |
| Firewall model | Firepower 2130 | Security software role | Cisco Firepower Threat Defense / NGFW |
| Rack units | 1RU rack mount | Dimensions | 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
| Fixed RJ-45 ports | 12 x 10M/100M/1GBASE-T | Fixed SFP+ ports | 4 x 1/10G SFP+ |
| Maximum Ethernet interfaces | Up to 24 total Ethernet ports with network module | Network module bay | One front network module slot |
| Network module options | 1G SFP, 10G SFP+, and fail-to-wire options | Management port | 1 x 10M/100M/1GBASE-T RJ-45 |
| Console port | 1 x RJ-45 console | USB port | 1 x USB 2.0 Type-A |
| Airflow | Front to rear; cold aisle to hot aisle through the I/O side | SSD storage | 1 x 200 GB SSD installed; second slot reserved for MSP |
| Power supply included | One 400W AC power supply | Power supply options | Dual 400W AC optional; single or dual 350W DC optional |
| Power redundancy | 1+1 AC or DC with dual supplies | AC input voltage | 100 to 240V AC |
| AC maximum current | Less than 6A at 100V | AC maximum output power | 400W |
| AC input frequency | 50 to 60 Hz | DC input voltage | -48V to -60VDC |
| DC maximum output power | 350W | Fan design | 1 hot-swappable fan module with 4 fans |
| Mounting | 4-post EIA-310-D rack; optional 2-post brackets | Weight | 8.8 kg (19.4 lb) with 1 power supply, 1 network module, 1 fan module, and 2 SSDs |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 10 to 85% noncondensing |
| Operating altitude | 10000 ft maximum | Firewall throughput | 10 Gbps |
| NGFW throughput | 5.4 Gbps | FW + AVC throughput | 5.4 Gbps |
| FW + AVC + IPS throughput | 5.4 Gbps | IPS throughput | 5.4 Gbps |
| TLS throughput | 760 Mbps | Concurrent sessions with AVC | 2 million |
| New connections with AVC | 30000 per second | IPsec VPN throughput | 1.9 Gbps |
| Maximum VPN peers | 7500 | Local management | Cisco Firepower Device Manager supported |
| Centralized management | Firewall Management Center or Cisco Defense Orchestrator | High availability | Active/standby |
| Smart Licensing | Base license included automatically; optional feature licenses managed through Smart Software Licensing | TMC license PID | L-FPR2130T-TMC= |
| TMC term options | L-FPR2130T-TMC-1Y, L-FPR2130T-TMC-3Y, L-FPR2130T-TMC-5Y | Network module release check | Verify firmware package and Threat Defense compatibility for selected module |
| Fixed SFP+ release baseline | Threat Defense 6.2 / ASA 9.12 |
Get More Information
Need pricing, stock, or shipping details for the FPR2130-NGFW-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
What operating temperature range applies to FPR2130-NGFW-K9 under NEBS conditions?
-
How much output do two power supplies give FPR2130-NGFW-K9, and do they stay redundant?
-
Does switching a fail-to-wire network module into bypass interrupt traffic on FPR2130-NGFW-K9?
-
Can a network module be hot-swapped in FPR2130-NGFW-K9?
-
Can copper SFPs fill both rows of the FPR2K-NM-8X10G module in FPR2130-NGFW-K9?
-
How is a DC power supply wired in FPR2130-NGFW-K9?
-
What circuit protection does FPR2130-NGFW-K9 need on its power feed?
-
How is an AC power supply removed from FPR2130-NGFW-K9?
-
Which spare PIDs cover the chassis and SSD of FPR2130-NGFW-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Pre-sales conversations felt like talking to someone who knew the product.
Their consistent post-sale responsiveness has earned our continued business.
Buying from a non-traditional source felt risky. Layer23 made it feel safe.
Smart licensing is a pain, but your team helped us sort out the transfer. Thanks.
I can do this all day. And so can this firewall. Reliable protection.