FPR3105-ASA-K9 – 10G ASA Firewall – 8xRJ45 8×1/10G SFP – 1RU 3105
Shop Expert-Recommended Accessories for the FPR3105-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR3105-ASA-K9 Description
The FPR3105-ASA-K9 is a Cisco Secure Firewall 3105 ASA appliance for branch and internet-edge perimeters that run Cisco Secure ASA software. The 1RU firewall is rated at 10.0 Gbps of stateful inspection throughput on 1500B UDP, 1.5 million concurrent connections and 2,000 VPN peers, with 8 RJ-45 ports, 8 1/10G SFP ports and one network module slot. The 3105 does not support clustering, and its module slot recognizes only 1G and 10G modules.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR3105-ASA-K9 |
|
Product type |
Cisco Secure Firewall 3105 ASA appliance |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10G SFP fixed ports |
|
Network module slot |
One removable network module slot |
|
Supported module profile |
8 x 1/10G network module options |
|
Storage |
1 x 900 GB SSD with 1 spare slot |
|
Power supply configuration |
Ships with one 400W AC power supply; dual AC optional; DC optional |
|
Stateful inspection firewall throughput |
10 Gbps |
|
ASA multiprotocol firewall throughput |
9 Gbps |
|
Concurrent firewall connections |
1.5 million |
Product Performance
Key Features
Stateful inspection is rated at 10.0 Gbps on 1500B UDP, an ideal-case figure. The 9.0 Gbps multiprotocol rating uses a TCP-heavy mix of HTTP, SMTP, FTP, IMAPv4, BitTorrent and DNS, and is the closer guide for mixed branch traffic.
The appliance holds 1.5 million concurrent connections and sets up 150,000 new connections per second. VPN scale tops out at 2,000 peers.
IPsec VPN runs at 5.5 Gbps on the 450B UDP L2L test. With VPN offload on ASA 9.18, the projected figure rises to 7.0 Gbps.
Two security contexts are included and the maximum is 100. Active/active and active/standby pairs are supported, but the 3105 cannot join a cluster, so growth beyond one chassis means a larger model.
Eight RJ-45 ports and eight 1/10G SFP ports are fixed, and the network module slot brings the total to as many as 24 Ethernet ports. The slot takes FPR3K-XNM-8X10G and the 1G and 10G hardware-bypass modules, while 25G, 40G and 100G modules are not recognized.
One 400W AC supply is fitted, with a second AC or DC supply available for 1+1 redundancy. A 900 GB SSD sits in slot 1, and slot 2 is reserved for software RAID1.
Application Scenarios
At a branch office edge, the appliance sits between the local network and the internet link, with its eight RJ-45 ports facing LAN segments and the 1/10G SFP ports facing the provider handoff.
A small headquarters terminates site-to-site and remote-user IPsec tunnels on the appliance, which supports up to 2,000 VPN peers and 5.5 Gbps of IPsec VPN throughput.
A managed network or multi-department site divides the appliance into security contexts, with 2 included and up to 100 supported, so each group keeps its own policy on one chassis.
Product Comparison
|
Parameter |
FPR3105-ASA-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput (1500B UDP) |
10.0 Gbps |
Not applicable |
18.0 Gbps |
|
Throughput: FW + AVC + IPS (1024B) |
Not applicable |
10.0 Gbps |
Not applicable |
|
Concurrent firewall connections |
1.5 million |
1.5 million with AVC |
2 million |
|
IPsec VPN throughput |
5.5 Gbps (450B UDP L2L) |
5.5 Gbps (1024B TCP, Fastpath) |
8 Gbps (450B UDP L2L) |
|
Maximum VPN peers |
2,000 |
2,000 |
3,000 |
|
Integrated I/O |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
|
Network modules |
8 x 1/10G Options |
8 x 1/10G Options |
8 x 1/10G Options |
|
Power supply configuration |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
|
Clustering |
Not supported |
Not supported |
8 chassis |
FPR3105-ASA-K9 is the entry ASA model of this group: it matches FPR3110-ASA-K9 on eight RJ-45 ports, eight 1/10G SFP ports and one network module slot, but stops at 10 Gbps of stateful throughput, 1.5 million connections and 2000 VPN peers, with no clustering. FPR3110-ASA-K9 raises those to 18 Gbps, 2 million connections and 3000 peers and supports 8-chassis clustering, so sites that need clustering or more than 5.5 Gbps of IPsec VPN should order it. FPR3105-NGFW-K9 is the same Secure Firewall 3105 hardware with Threat Defense software, so it is the order for sites that run Threat Defense instead of ASA. Above 18 Gbps of ASA throughput, FPR3120-ASA-K9 reaches 22 Gbps and 4 million connections.
Ordering Checklist
- Network module: Choose FPR3K-XNM-8X10G, or a hardware bypass module such as FPR3K-XNM-8X1GF, FPR3K-XNM-6X1SXF, FPR3K-XNM-6X10SRF or FPR3K-XNM-6X10LRF. FPR3K-XNM-8X25G, FPR3K-XNM-4X40G and the 100G module are not recognized by software in this model.
- Redundant power: Add FPR3K-PWR-AC-400= for a redundant AC unit, or FPR3K-PWR-DC-400= for DC. Power redundancy exists only when a redundant unit is ordered; AC and DC units cannot be mixed in one chassis.
- Second SSD: Add FPR3K-SSD900= for slot 2. One 900 GB SSD ships in slot 1, and slot 2 is the RAID1 mirror.
- Rack mounting: Order the FPR3K-SLIDE-RAILS= slide rail kit, which is recommended, or FPR3K-BRKT= rack-mount brackets. Rails and brackets are packed only when ordered.
- ASA licenses: Add L-FPR3K-ASASC-5= or L-FPR3K-ASASC-10= for more than the 2 included contexts, and L-FPR3K-ENC-K9= for strong encryption. These are separate order lines, and the encryption license is not available in export-restricted regions.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR3K-XNM-8X10G |
3100 Series 8-port 1G/10G SFP+ network module |
|
FPR3K-XNM-8X1GF |
8-port 10/100/1000Base-T hardware bypass network module |
|
FPR3K-XNM-6X10SRF |
6-port 10G SFP SR multimode hardware bypass network module |
|
FPR3K-XNM-6X10LRF |
6-port 10G SFP LR single-mode hardware bypass network module |
|
L-FPR3K-ASASC-10= |
Cisco Secure Firewall 3100 add-on 10 security context licenses |
|
L-FPR3K-ASASC-5= |
Cisco Secure Firewall 3100 add-on 5 security context licenses |
|
L-FPR3K-ENC-K9= |
Strong encryption license for ASA on Cisco Secure Firewall 3100 Series |
|
Cisco Secure Firewall 3100 Series 400W AC power supply | |
|
FPR3K-FAN= |
Cisco Secure Firewall 3100 Series fan tray |
|
Cisco Secure Firewall 3100 Series 900 GB SSD | |
|
FPR3K-SLIDE-RAILS= |
Cisco Secure Firewall 3100 Series slide rail kit |
Front View
|
1 |
RJ-45 console port |
2 |
Recessed factory reset button |
|
3 |
SSD-1 |
4 |
SSD-2 |
|
5 |
Network module (NM-2) |
6 |
System LEDs |
|
7 |
Type A USB 3.1 port |
8 |
Gigabit Ethernet management port:Secure Firewall Threat Defense—Management 0 (also referred to as Management 1/1 and Diagnostic 1/1)ASA—Management 1/1 |
|
9 |
Reset button LED |
10 |
Pullout asset card with chassis serial number, getting started guide QR code, and LTP QR code |
|
11 |
Eight fixed RJ-45 ports (NM-1)RJ-45 ports named Ethernet 1/1 through 1/8 left to right; for a list of supported SFPs. |
12 |
Eight fixed SFP+ ports (NM-1)SFP+ ports named Ethernet 1/9 through 1/16 left to right; for a list of supported SFPs. |
Rear View
|
1 |
Power on/off switch |
2 |
Power supply module (PSU-1) |
|
3 |
Power supply module FAIL LED (PSU-1) |
4 |
Fan module LED (FAN-1) |
|
5 |
Fan module (FAN-1) |
6 |
Fan module LED (FAN-2) |
|
7 |
Fan module (FAN-2) |
8 |
Power supply module (PSU-2) |
|
9 |
Power supply module FAIL LED (PSU-2) |
10 |
Chassis power LEDNote This power LED has the same behavior as the front panel LED. See Front Panel LEDs for more information. |
|
11 |
Power supply module OK LED (PSU-1) |
12 |
Power supply module connector (PSU-1) |
|
13 |
Power supply module OK LED (PSU-2) |
14 |
Power supply module connector (PSU-2) |
|
15 |
Two-post grounding padNote The two-post grounding lug and two screws are included in the accessory kit. |
— |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR3105-ASA-K9 | Product type | Cisco Secure Firewall 3105 ASA appliance |
| Firewall model | Secure Firewall 3105 | Security software role | Cisco Secure ASA |
| Minimum ASA release | ASA 9.19 and later | Rack units | 1RU |
| Dimensions | 1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm) | Airflow | Front to rear; I/O side to non-I/O side |
| Fixed RJ-45 ports | 8 x 10M/100M/1GBASE-T Ethernet interfaces | Fixed SFP ports | 8 x 1/10 Gigabit Ethernet SFP interfaces |
| Maximum Ethernet ports | Up to 24 total Ethernet ports with network module | Network module slot | One removable network module slot |
| 3105 optional interface profile | 10G SFP+ options | Management port | 1 x 1/10G SFP management port |
| Console port | 1 x RJ-45 serial console | USB port | 1 x USB Type-A port |
| SSD storage | 1 x 900 GB SSD with 1 spare slot | Fan modules | 2 hot-swappable dual fan modules |
| Power supply configuration | Single 400W AC; dual 400W AC optional; DC optional | Power redundancy | Available when an extra power supply is ordered |
| AC input voltage | 100 to 240V AC | AC maximum output power | 400W |
| DC input voltage | -48V to -60VDC | DC maximum output power | 400W |
| Stateful inspection firewall throughput | 10 Gbps | Multiprotocol firewall throughput | 9 Gbps |
| Concurrent firewall connections | 1.5 million | New connections per second | 150000 |
| IPsec VPN throughput | 5.5 Gbps | Maximum VPN peers | 2000 |
| Security contexts | 2 included; 100 maximum | High availability | Active/active and active/standby |
| Clustering | No clustering on 3105 | ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator |
| Local management | Adaptive Security Device Manager | Mounting | Standard 19-inch square-hole rack |
| Operating temperature | 32 to 104F (0 to 40C) | Sound pressure | 65 dBA typical; 74 dBA maximum |
| Power redundancy rule | Order an extra power supply for redundancy |
Quality Certifications
Customer Reviews
Questions & Answers
-
What throughput does FPR3105-ASA-K9 reach as an ASA firewall?
-
Does FPR3105-ASA-K9 run Threat Defense or ASA, and which licenses does it use?
-
What are the VLAN and TLS proxy session maximums of FPR3105-ASA-K9 under ASA 9.22 license limits?
-
How much system memory does FPR3105-ASA-K9 have?
-
How many SSD, power supply and fan module bays does FPR3105-ASA-K9 have, and how many are populated?
-
Which legacy network module PIDs does FPR3105-ASA-K9 not recognize?
-
What does a fully equipped FPR3105-ASA-K9 weigh for rack planning?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Their shipping operation feels professional and well-organized.
My team’s risk-averse procurement approved Layer23. That should tell you everything.
We got volume pricing without needing to push for it. Invoice formatting was a bit different from what our AP system expects, but workable.
Using these for high speed logging and firewalling. 3100 hardware is solid.
Easy to rack. Dual power supplies included. Verified genuine.