FPR3110-ASA-K9 – 18G ASA Firewall – 8xRJ45 8×1/10G SFP – 1RU 3110
Shop Expert-Recommended Accessories for the FPR3110-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR3110-ASA-K9 Description
The FPR3110-ASA-K9 is a Cisco Secure Firewall 3110 ASA appliance for branch, internet-edge and data center perimeters that run Cisco Secure ASA software. The 1RU firewall is rated at 18.0 Gbps of stateful inspection throughput on 1500B UDP and 15.0 Gbps of multiprotocol throughput, with 2 million concurrent connections, 3,000 VPN peers, 8 RJ-45 ports, 8 1/10G SFP ports and one network module slot. ASA clustering joins up to 8 chassis, while the module slot recognizes only 1G and 10G modules.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR3110-ASA-K9 |
|
Product type |
Cisco Secure Firewall 3110 ASA appliance |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10G SFP fixed ports |
|
Network module slot |
One removable network module slot |
|
Supported module profile |
8 x 1/10G network module options |
|
Storage |
1 x 900 GB SSD with 1 spare slot |
|
Power supply configuration |
Ships with one 400W AC power supply; dual AC optional; DC optional |
|
Stateful inspection firewall throughput |
18 Gbps |
|
ASA multiprotocol firewall throughput |
15 Gbps |
|
Concurrent firewall connections |
2 million |
Product Performance
Key Features
Stateful inspection reaches 18.0 Gbps on 1500B UDP, which is the ideal-case figure. The 15.0 Gbps multiprotocol rating comes from a TCP-heavy protocol mix and suits mixed enterprise traffic better.
The firewall tracks 2 million concurrent connections and accepts 300,000 new connections per second, which sets the ceiling for busy perimeters with many short-lived sessions.
IPsec VPN is rated at 8 Gbps on the 450B UDP L2L test, with up to 3,000 peers. VPN offload on ASA 9.18 projects 12.0 Gbps.
Up to 8 chassis can form an ASA cluster, and active/active and active/standby pairs are also supported. Two security contexts are included, with a maximum of 100.
Eight 10M/100M/1GBASE-T ports sit beside eight 1/10G SFP ports, and the module slot lifts the total to 24 Ethernet ports. Only 1G and 10G modules are recognized, including the 8-port FPR3K-XNM-8X10G.
One 400W AC supply is fitted and a second can be added for 1+1 redundancy, with DC supplies as an alternative. AC and DC supplies cannot share a chassis.
Application Scenarios
At the internet edge of a mid-size site, the appliance sits between the core switches and the provider links and applies ASA stateful inspection to traffic in both directions.
Two appliances at a data center perimeter run as an active/standby pair, or join a cluster of up to 8 chassis, so the perimeter keeps passing traffic when one unit fails.
A regional hub terminates IPsec tunnels from branch firewalls, with support for up to 3,000 VPN peers and 8 Gbps of IPsec VPN throughput.
Product Comparison
|
Parameter |
FPR3110-ASA-K9 | |||
|---|---|---|---|---|
|
Stateful inspection firewall throughput (1500B UDP) |
18.0 Gbps |
10.0 Gbps |
Not applicable |
22.0 Gbps |
|
Throughput: FW + AVC + IPS (1024B) |
Not applicable |
Not applicable |
17.0 Gbps |
Not applicable |
|
Concurrent firewall connections |
2 million |
1.5 million |
2 million with AVC |
4 million |
|
IPsec VPN throughput |
8 Gbps (450B UDP L2L) |
5.5 Gbps (450B UDP L2L) |
8 Gbps (1024B TCP, Fastpath) |
10 Gbps (450B UDP L2L) |
|
Maximum VPN peers |
3,000 |
2,000 |
3,000 |
7,000 |
|
Integrated I/O |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
|
Network modules |
8 x 1/10G Options |
8 x 1/10G Options |
8 x 1/10G Options |
8 x 1/10G Options |
|
Power supply configuration |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
|
Clustering |
8 chassis |
Not supported |
8 chassis |
8 chassis |
FPR3110-ASA-K9 sits one step above FPR3105-ASA-K9 on the same 1RU chassis and 1/10G ports: it handles 18 Gbps of ASA stateful throughput, 2 million connections and 3000 VPN peers against 10 Gbps, 1.5 million and 2000, and FPR3105-ASA-K9 cannot join a cluster, while this model can join an 8-chassis one. FPR3110-NGFW-K9 is the same Secure Firewall 3110 hardware with Threat Defense software, for sites that run Threat Defense instead of ASA. FPR3120-ASA-K9 is the next step at 22 Gbps, 4 million connections and 7000 peers, for sites that outgrow 8 Gbps of IPsec VPN, as it reaches 10 Gbps.
Ordering Checklist
- Network module: Choose FPR3K-XNM-8X10G, or a hardware bypass module such as FPR3K-XNM-8X1GF, FPR3K-XNM-6X1SXF, FPR3K-XNM-6X10SRF or FPR3K-XNM-6X10LRF. FPR3K-XNM-8X25G, FPR3K-XNM-4X40G and the 100G module are not recognized by software in this model.
- Redundant power: Add FPR3K-PWR-AC-400= for a redundant AC unit, or FPR3K-PWR-DC-400= for DC. Power redundancy exists only when a redundant unit is ordered; AC and DC units cannot be mixed in one chassis.
- Second SSD: Add FPR3K-SSD900= for slot 2. One 900 GB SSD ships in slot 1, and slot 2 is the RAID1 mirror.
- Rack mounting: Order the FPR3K-SLIDE-RAILS= slide rail kit, which is recommended, or FPR3K-BRKT= rack-mount brackets. Rails and brackets are packed only when ordered.
- ASA licenses: Add L-FPR3K-ASASC-5= or L-FPR3K-ASASC-10= for more than the 2 included contexts, and L-FPR3K-ENC-K9= for strong encryption. These are separate order lines, and the encryption license is not available in export-restricted regions.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR3K-XNM-8X10G |
3100 Series 8-port 1G/10G SFP+ network module |
|
FPR3K-XNM-8X1GF |
8-port 10/100/1000Base-T hardware bypass network module |
|
FPR3K-XNM-6X1SXF |
6-port 1G SFP SX multimode hardware bypass network module |
|
FPR3K-XNM-6X10SRF |
6-port 10G SFP SR multimode hardware bypass network module |
|
FPR3K-XNM-6X10LRF |
6-port 10G SFP LR single-mode hardware bypass network module |
|
L-FPR3K-ASASC-10= |
Cisco Secure Firewall 3100 add-on 10 security context licenses |
|
L-FPR3K-ASASC-5= |
Cisco Secure Firewall 3100 add-on 5 security context licenses |
|
L-FPR3K-ENC-K9= |
Strong encryption license for ASA on Cisco Secure Firewall 3100 Series |
|
Cisco Secure Firewall 3100 Series 400W AC power supply | |
|
FPR3K-FAN= |
Cisco Secure Firewall 3100 Series fan tray |
|
Cisco Secure Firewall 3100 Series 900 GB SSD | |
|
FPR3K-SLIDE-RAILS= |
Cisco Secure Firewall 3100 Series slide rail kit |
Front View
|
1 |
RJ-45 console port |
2 |
Recessed factory reset button |
|
3 |
SSD-1 |
4 |
SSD-2 |
|
5 |
Network module (NM-2) |
6 |
System LEDs |
|
7 |
Type A USB 3.1 port |
8 |
Gigabit Ethernet management port:Secure Firewall Threat Defense—Management 0 (also referred to as Management 1/1 and Diagnostic 1/1)ASA—Management 1/1 |
|
9 |
Reset button LED |
10 |
Pullout asset card with chassis serial number, getting started guide QR code, and LTP QR code |
|
11 |
Eight fixed RJ-45 ports (NM-1)RJ-45 ports named Ethernet 1/1 through 1/8 left to right; for a list of supported SFPs. |
12 |
Eight fixed SFP+ ports (NM-1)SFP+ ports named Ethernet 1/9 through 1/16 left to right; for a list of supported SFPs. |
Rear View
|
1 |
Power on/off switch |
2 |
Power supply module (PSU-1) |
|
3 |
Power supply module FAIL LED (PSU-1) |
4 |
Fan module LED (FAN-1) |
|
5 |
Fan module (FAN-1) |
6 |
Fan module LED (FAN-2) |
|
7 |
Fan module (FAN-2) |
8 |
Power supply module (PSU-2) |
|
9 |
Power supply module FAIL LED (PSU-2) |
10 |
Chassis power LEDNote This power LED has the same behavior as the front panel LED. See Front Panel LEDs for more information. |
|
11 |
Power supply module OK LED (PSU-1) |
12 |
Power supply module connector (PSU-1) |
|
13 |
Power supply module OK LED (PSU-2) |
14 |
Power supply module connector (PSU-2) |
|
15 |
Two-post grounding padNote The two-post grounding lug and two screws are included in the accessory kit. |
— |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR3110-ASA-K9 | Product type | Cisco Secure Firewall 3110 ASA appliance |
| Firewall model | Secure Firewall 3110 | Security software role | Cisco Secure ASA |
| Minimum ASA introduction | ASA 9.17(1) introduced ASA for Secure Firewall 3110 | Rack units | 1RU |
| Dimensions | 1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm) | Airflow | Front to rear; I/O side to non-I/O side |
| Fixed RJ-45 ports | 8 x 10M/100M/1GBASE-T Ethernet interfaces | Fixed SFP ports | 8 x 1/10 Gigabit Ethernet SFP interfaces |
| Maximum Ethernet ports | Up to 24 total Ethernet ports with network module | Network module slot | One removable network module slot named NM-2 |
| 3110 optional interface profile | 8 x 1/10G network module options | Management port | 1 x 1/10G SFP management port |
| Console port | 1 x RJ-45 serial console | USB port | 1 x USB 3.0 Type-A port |
| SSD storage | 1 x 900 GB SSD with 1 spare slot | Fan modules | 2 hot-swappable dual fan modules |
| Power supply configuration | Single 400W AC; dual 400W AC optional; DC optional | Power redundancy | 1+1 AC or DC with dual supplies |
| AC input voltage | 100 to 240V AC | AC maximum output power | 400W |
| DC input voltage | -48V to -60VDC | DC maximum output power | 400W |
| Stateful inspection firewall throughput | 18 Gbps | Multiprotocol firewall throughput | 15 Gbps |
| Concurrent firewall connections | 2 million | New connections per second | 300000 |
| IPsec VPN throughput | 8 Gbps | Projected IPsec VPN with offload | 12 Gbps with ASA 9.18 |
| Maximum VPN peers | 3000 | Security contexts | 2 included; 100 maximum |
| High availability | Active/active and active/standby | Clustering | 8 chassis |
| ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator | Local management | Adaptive Security Device Manager |
| Fixed port first supported release | Threat Defense 7.1 / ASA 9.17 for 3110 fixed SFP/SFP+ ports | Operating temperature | 32 to 104F (0 to 40C) |
| Operating altitude | 10000 ft maximum | Sound pressure | 65 dBA typical; 74 dBA maximum |
| Power supply order note | Order an extra power supply for redundant power |
Quality Certifications
Customer Reviews
Questions & Answers
-
What throughput does FPR3110-ASA-K9 reach as an ASA firewall?
-
Does FPR3110-ASA-K9 run Threat Defense or ASA, and which licenses does it use?
-
How much system memory does FPR3110-ASA-K9 have?
-
How many SSD, power supply and fan module bays does FPR3110-ASA-K9 have, and how many are populated?
-
Which legacy network module PIDs does FPR3110-ASA-K9 not recognize?
-
What does a fully equipped FPR3110-ASA-K9 weigh for rack planning?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Pleasant surprise to find such a quality vendor.
Their sales team listened to our requirements before suggesting anything.
Came with all the original tags and identifiers. Everything we’d expect from a genuine product. Took a little longer to clear customs than expected, otherwise excellent.
Imported to Canada without issues.
Sharp, fast, reliable. Just like me. Good shipping.