FPR2140-ASA-K9 – 20G ASA Firewall – 12xRJ45 4xSFP+ – Dual AC 2140
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR2140-ASA-K9 Description
The FPR2140-ASA-K9 is a Cisco Firepower 2100 Series ASA firewall appliance for branch and internet-edge boundaries that run Cisco ASA software. The appliance provides 20 Gbps of stateful inspection throughput (1500B UDP) and 10 Gbps multiprotocol, 12 RJ-45 and four 1/10G SFP+ ports, one network module slot and 10,000 VPN peers. ASA and Threat Defense are separate appliance models on the 2140 hardware, so this appliance runs ASA only.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR2140-ASA-K9 |
|
Product type |
Cisco Firepower 2140 ASA firewall appliance |
|
Security software role |
Cisco ASA software |
|
Form factor |
1RU rack-mount appliance |
|
Fixed data ports |
12 x RJ-45 and 4 x 1/10G SFP+ ports |
|
Network module bay |
1 network module slot |
|
Maximum Ethernet interfaces |
Up to 24 total Ethernet ports with network module |
|
Storage |
1 x 200 GB SSD installed; 1 spare slot for MSP |
|
Power supply configuration |
Dual 400W AC; single or dual 350W DC optional |
|
Default power supply |
Two FPR2K-PWR-AC-400 400W AC supplies included |
|
Stateful inspection firewall throughput |
20 Gbps |
|
ASA multiprotocol firewall throughput |
10 Gbps |
|
Concurrent firewall connections |
3 million |
Product Performance
Key Features
The 2140 is the largest Firepower 2100 model for ASA, at 20 Gbps stateful inspection and 10 Gbps multiprotocol throughput. The 2130 is half of both figures, and the 2120 is 6 Gbps and 3 Gbps.
Twelve RJ-45 ports run at 10M, 100M or 1G, and four fixed SFP+ ports run at 1G or 10G. Copper hosts and fiber uplinks connect without adding a module.
The bay takes an 8-port 1G SFP, an 8-port 10G SFP+ or a fail-to-wire module, which raises the chassis to 24 interfaces. Fail-to-wire modules pair ports 1 with 2 and 3 with 4.
Both 400W AC supplies ship in the chassis and run 1+1 with load sharing. A 350W DC supply is the alternative, but AC and DC modules cannot share one chassis.
Two security contexts are included and the limit is 40, which suits tenant separation on one firewall. VPN capacity is 2 Gbps of IPsec and 10,000 peers, and ASA high availability runs active/active or active/standby.
One hot-swappable fan tray holds four fans in 3+1 redundancy. The 200 GB SSD sits in slot 1, and slot 2 is reserved for the Malware Storage Pack.
Application Scenarios
A campus or regional office that already manages its perimeter with ASA can place the appliance at the internet edge, where the 20 Gbps stateful inspection figure and 3 million concurrent connections set the traffic ceiling.
A company with many branch routers and mobile users can terminate IPsec tunnels on the appliance, which supports up to 10,000 VPN peers and 2 Gbps of IPsec throughput.
A server room with 10G uplinks can connect the fixed SFP+ ports to its core switches and split tenants into up to 40 security contexts on the same chassis.
Product Comparison
|
Parameter |
FPR2140-ASA-K9 | |||
|---|---|---|---|---|
|
Stateful inspection firewall throughput |
20 Gbps |
Not applicable |
10 Gbps |
6 Gbps |
|
Stateful inspection firewall throughput (multiprotocol) |
10 Gbps |
Not applicable |
5 Gbps |
3 Gbps |
|
Concurrent firewall connections |
3 million |
Not applicable |
2 million |
1.5 million |
|
Throughput: FW + AVC + IPS (1024B) |
Not applicable |
10.4 Gbps |
Not applicable |
Not applicable |
|
IPsec VPN throughput (450B UDP L2L test) |
2 Gbps |
Not applicable |
1 Gbps |
700 Mbps |
|
Maximum VPN peers |
10,000 |
10,000 |
7,500 |
3,500 |
|
Integrated I/O |
12 x RJ-45 and 4 x 10 Gigabit (SFP+) |
12 x RJ-45 and 4 x 10 Gigabit (SFP+) |
12 x RJ-45 and 4 x 10 Gigabit (SFP+) |
12 x RJ-45 and 4 x 1 Gigabit (SFP) |
|
Network modules |
1 slot |
1 slot |
1 slot |
No slot |
|
Power supply configuration |
Dual 400W AC; single or dual 350W DC optional |
Dual 400W AC; single or dual 350W DC optional |
Single 400W AC; dual 400W AC optional; single or dual 350W DC optional |
Single integrated 250W AC |
FPR2140-ASA-K9 and FPR2140-NGFW-K9 share the same 1RU hardware, ports, network module bay and dual 400W AC supplies, and differ only in software: FPR2140-ASA-K9 is the Cisco ASA order, while FPR2140-NGFW-K9 is the Firewall Threat Defense order with no ASA throughput figures. Sites that need ASA at lower scale can use FPR2130-ASA-K9, which lists 10 Gbps of stateful inspection against 20 Gbps, 2 million connections against 3 million, and one 400W AC supply instead of two. FPR2120-ASA-K9 drops to 6 Gbps, has four 1G SFP ports and no network module slot, so it fits only branches that need neither a module nor 10G fixed uplinks.
Optional Add-ons
|
Model |
Description |
|---|---|
|
L-FPR2100-ASA= |
Cisco Firepower 2100 ASA Essentials license |
|
L-FPR2K-ASASC-5= |
Cisco Firepower 2100 add-on 5 security context license |
|
L-FPR2K-ASASC-10= |
Cisco Firepower 2100 add-on 10 security context license |
|
L-FPR2K-ENC-K9= |
Cisco Firepower 2100 ASA strong encryption license when the account is not already export-authorized |
|
FPR2K-NM-8X10G |
Firepower 2100 8-port 10G SFP+ network module |
|
FPR2K-NM-8X1G |
Firepower 2100 8-port 1G SFP network module |
|
FPR2K-NM-8X1G-F |
Firepower 2100 8-port 1G copper hardware bypass network module |
|
FPR2K-NM-6X1SX-F |
Firepower 2100 6-port 1G SX fiber hardware bypass network module |
|
FPR2K-NM-6X10SR-F |
Firepower 2100 6-port 10G SR hardware bypass network module |
|
FPR2K-NM-6X10LR-F |
Firepower 2100 6-port 10G LR hardware bypass network module |
|
FPR2K-PWR-AC-400= |
400W AC power supply spare for Firepower 2130 and 2140 |
|
FPR2K-PWR-DC-350= |
350W DC power supply spare for Firepower 2130 and 2140 |
|
FPR2K-FAN= |
Fan tray spare for Firepower 2130 and 2140 |
|
FPR2K-SSD200= |
200 GB SSD spare for Firepower 2130 and 2140 |
|
FPR-MSP-SSD= |
Malware Storage Pack SSD option |
|
FPR2K-SLIDE-RAILS= |
Slide rail kit spare |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR2140-ASA-K9 | Product type | Cisco Firepower 2140 ASA firewall appliance |
| Firewall model | Firepower 2140 | Security software role | Cisco ASA software |
| Rack units | 1RU rack mount | Dimensions | 1.73 x 16.90 x 19.76 in. (4.4 x 42.9 x 50.2 cm) |
| Fixed RJ-45 ports | 12 x 10M/100M/1GBASE-T | Fixed SFP+ ports | 4 x 1/10G SFP+ |
| Maximum Ethernet interfaces | Up to 24 total Ethernet ports with network module | Network module bay | One network module slot |
| Network module options | 8-port 1G SFP, 8-port 10G SFP+, and 1G or 10G fail-to-wire options | Management port | 1 x 10M/100M/1GBASE-T RJ-45 |
| Console port | 1 x RJ-45 console | USB port | 1 x USB 2.0 Type-A |
| Airflow | Front to rear; cold aisle to I/O side | SSD storage | 1 x 200 GB SSD installed; second slot reserved for MSP |
| Power supply included | Dual 400W AC power supplies | Power supply options | Single or dual 350W DC optional |
| Power redundancy | 1+1 AC or DC with dual supplies | AC input voltage | 100 to 240V AC |
| AC maximum input current | Less than 6A at 100V | AC maximum output power | 400W |
| AC input frequency | 50 to 60 Hz | DC input voltage | -48V to -60VDC |
| DC maximum output power | 350W | Fan design | 1 hot-swappable fan tray with 4 fans |
| Fan redundancy | 3+1 redundant fan operation | Mounting | 4-post EIA-310-D rack rails included; optional 2-post brackets |
| Weight | 9.53 kg (21 lb) with 2 power supplies, 1 network module, 1 fan module, and 2 SSDs | Operating temperature | 32 to 104F (0 to 40C) |
| Operating humidity | 10 to 85% noncondensing | Operating altitude | 10000 ft maximum |
| Noise | 56 dBA at 25C; 77 dBA at highest system performance | Stateful inspection firewall throughput | 20 Gbps |
| Multiprotocol firewall throughput | 10 Gbps | Concurrent firewall connections | 3 million |
| New connections per second | 75000 | IPsec VPN throughput | 2 Gbps |
| Maximum VPN peers | 10000 | Security contexts | 2 included; 40 maximum |
| High availability | Active/active and active/standby | Local ASA management | Adaptive Security Device Manager |
| Centralized ASA management | Cisco Security Manager or Cisco Defense Orchestrator | ASA Essentials license PID | L-FPR2100-ASA= |
| Context license options | L-FPR2K-ASASC-5= and L-FPR2K-ASASC-10= | Strong encryption PID | L-FPR2K-ENC-K9= |
| Network module ASA compatibility | FPR2K-NM-8X10G from ASA 9.9 or 9.8(2)/(3); FPR2K-NM-8X1G and fail-to-wire modules from ASA 9.10 |
Get More Information
Need pricing, stock, or shipping details for the FPR2140-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email [email protected] for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Can FPR2140-ASA-K9 use a 100 GB SSD, and does the second drive slot need a Malware Storage Pack?
-
Do I need to power down FPR2140-ASA-K9 before swapping its network module?
-
Which fail-to-wire port pairs does FPR2140-ASA-K9 support, and what happens when bypass switches?
-
What circuit protection should feed the power supplies of FPR2140-ASA-K9?
-
How do I wire a 350W DC supply into FPR2140-ASA-K9?
-
How do I remove a FPR2K-PWR-AC-400 supply from FPR2140-ASA-K9 and what covers an empty bay?
-
Which spare PID covers the entire FPR2140-ASA-K9 chassis, and what does it exclude?
-
Is FPR2140-ASA-K9 NEBS certified, and how heavy is a fully equipped unit?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
We compared this against our reference unit. Identical quality.
Don’t hesitate. Layer23 is exactly what you’re hoping to find.
Support after the sale is just as strong as the sales process itself.
Shipping to Tokyo was reasonable. Equipment is authentic.
Replacing ASA 5555-X. The 2140 is a beast. Fast boot time.