FPR3120-ASA-K9 – 22G ASA Firewall – 8xRJ45 8×1/10G SFP – 1RU 3120
Shop Expert-Recommended Accessories for the FPR3120-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR3120-ASA-K9 Description
The FPR3120-ASA-K9 is a Cisco Secure Firewall 3120 ASA appliance for edge firewall and VPN deployments that run Cisco Secure ASA software. The 1RU firewall provides 22.0 Gbps of stateful inspection throughput on 1500B UDP, 4 million concurrent connections, 10 Gbps of IPsec VPN throughput on a 450B UDP L2L test and 7,000 VPN peers across 8 RJ-45 and 8 1/10G SFP ports. Its single network module slot takes 1G and 10G modules only, and ASA clustering supports up to 8 chassis.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR3120-ASA-K9 |
|
Product type |
Cisco Secure Firewall 3120 ASA appliance |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10G SFP fixed ports |
|
Network module slot |
1 removable network module slot |
|
Supported module profile |
8 x 1/10G network module options |
|
Storage |
1 x 900 GB SSD with 1 spare slot |
|
Power supply configuration |
Single 400W AC; dual 400W AC optional; DC optional |
|
Stateful inspection firewall throughput |
22 Gbps |
|
ASA multiprotocol firewall throughput |
17 Gbps |
|
Concurrent firewall connections |
4 million |
Product Performance
Key Features
Stateful inspection is rated at 22.0 Gbps on 1500B UDP, while the 17.0 Gbps multiprotocol figure reflects a TCP-heavy mix of HTTP, SMTP, FTP, IMAPv4, BitTorrent and DNS.
A single appliance holds 4 million concurrent connections and sets up 500,000 new connections per second, double the 2 million connections of FPR3110-ASA-K9.
IPsec VPN reaches 10 Gbps on the 450B UDP L2L test and 7,000 peers. With VPN offload on ASA 9.18, the projected figure is 15.4 Gbps.
ASA clusters join up to 8 chassis, and active/active and active/standby pairs are available. Two security contexts come with the platform and the maximum is 100.
Eight RJ-45 ports and eight 1/10G SFP ports are fixed, with up to 24 Ethernet ports once the module slot is filled. Modules for 25G, 40G and 100G fit physically but are not recognized, so expansion stays at 1G and 10G.
A 400W AC supply is fitted with a second bay for 1+1 redundancy, and two dual-fan modules provide 3+1 cooling redundancy. One 900 GB SSD ships in slot 1, with slot 2 held for RAID1.
Application Scenarios
At the internet edge of a campus or headquarters, the appliance applies ASA inspection to traffic between the core and the provider links, which attach to its 1/10G SFP ports.
A central site terminates site-to-site and remote-user IPsec tunnels on the appliance, which supports up to 7,000 VPN peers and 10 Gbps of IPsec VPN throughput.
A data center edge that outgrows one firewall adds chassis to an ASA cluster of up to 8 units, with 4 million concurrent connections handled per appliance.
Product Comparison
|
Parameter |
FPR3120-ASA-K9 | |||
|---|---|---|---|---|
|
Stateful inspection firewall throughput (1500B UDP) |
22.0 Gbps |
18.0 Gbps |
Not applicable |
42.0 Gbps |
|
Throughput: FW + AVC + IPS (1024B) |
Not applicable |
Not applicable |
21.0 Gbps |
Not applicable |
|
Concurrent firewall connections |
4 million |
2 million |
4 million with AVC |
6 million |
|
IPsec VPN throughput |
10 Gbps (450B UDP L2L) |
8 Gbps (450B UDP L2L) |
10 Gbps (1024B TCP, Fastpath) |
14 Gbps (450B UDP L2L) |
|
Maximum VPN peers |
7,000 |
3,000 |
7,000 |
15,000 |
|
Integrated I/O |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10/25G SFP |
|
Network modules |
8 x 1/10G Options |
8 x 1/10G Options |
8 x 1/10G Options |
8 x 1/10/25G, 4 x 40G Options |
|
Power supply configuration |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Single 400W AC, dual 400W AC optional; single or dual 400W DC optional |
Dual 400W AC; single or dual 400W DC optional |
|
Clustering |
8 chassis |
8 chassis |
8 chassis |
8 chassis |
FPR3120-ASA-K9 is the 22 Gbps ASA model of this group: against FPR3110-ASA-K9 at 18 Gbps it doubles connections to 4 million and raises VPN peers from 3000 to 7000, on the same 1/10G fixed ports and 1RU chassis. FPR3120-NGFW-K9 is the same Secure Firewall 3120 hardware with Threat Defense software, for sites that run Threat Defense instead of ASA. FPR3130-ASA-K9 is the choice for 25G: its eight fixed SFP ports run at 1/10/25G, separate from its optional network modules, which include 25G, 40G and 100G options that this model does not recognize. It reaches 42 Gbps, 6 million connections and 15000 peers with two 400W AC supplies fitted.
Ordering Checklist
- Network module: Choose FPR3K-XNM-8X10G, or a hardware bypass module such as FPR3K-XNM-8X1GF, FPR3K-XNM-6X1SXF, FPR3K-XNM-6X10SRF or FPR3K-XNM-6X10LRF. FPR3K-XNM-8X25G, FPR3K-XNM-4X40G and the 100G module are not recognized by software in this model.
- Redundant power: Add FPR3K-PWR-AC-400= for a redundant AC unit, or FPR3K-PWR-DC-400= for DC. Power redundancy exists only when a redundant unit is ordered; AC and DC units cannot be mixed in one chassis.
- Second SSD: Add FPR3K-SSD900= for slot 2. One 900 GB SSD ships in slot 1, and slot 2 is the RAID1 mirror.
- Rack mounting: Order the FPR3K-SLIDE-RAILS= slide rail kit, which is recommended, or FPR3K-BRKT= rack-mount brackets. Rails and brackets are packed only when ordered.
- ASA licenses: Add L-FPR3K-ASASC-5= or L-FPR3K-ASASC-10= for more than the 2 included contexts, and L-FPR3K-ENC-K9= for strong encryption. These are separate order lines, and the encryption license is not available in export-restricted regions.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR3K-XNM-8X10G |
3100 Series 8-port 1G/10G SFP+ network module |
|
FPR3K-XNM-8X10G= |
3100 Series 8-port 1G/10G SFP+ network module spare |
|
FPR3K-XNM-8X1GF |
8-port 10/100/1000Base-T hardware bypass network module |
|
FPR3K-XNM-6X1SXF |
6-port 1G SFP SX multimode hardware bypass network module |
|
FPR3K-XNM-6X10SRF |
6-port 10G SFP SR multimode hardware bypass network module |
|
FPR3K-XNM-6X10LRF |
6-port 10G SFP LR single-mode hardware bypass network module |
|
L-FPR3K-ASASC-10= |
Cisco Secure Firewall 3100 add-on 10 security context licenses |
|
L-FPR3K-ASASC-5= |
Cisco Secure Firewall 3100 add-on 5 security context licenses |
|
L-FPR3K-ENC-K9= |
License to enable strong encryption for ASA on Cisco Secure Firewall 3100 Series |
|
Cisco Secure Firewall 3100 Series 400W AC power supply | |
|
Cisco Secure Firewall 3100 Series 400W DC power supply | |
|
FPR3K-FAN= |
Cisco Secure Firewall 3100 Series fan tray |
|
Cisco Secure Firewall 3100 Series SSD for FPR 3100 Series | |
|
FPR3K-SLIDE-RAILS= |
Cisco Secure Firewall 3100 Series slide rail kit |
Front View
|
1 |
RJ-45 console port |
2 |
Recessed factory reset button |
|
3 |
SSD-1 |
4 |
SSD-2 |
|
5 |
Network module (NM-2) |
6 |
System LEDs |
|
7 |
Type A USB 3.1 port |
8 |
Gigabit Ethernet management port:Secure Firewall Threat Defense—Management 0 (also referred to as Management 1/1 and Diagnostic 1/1)ASA—Management 1/1 |
|
9 |
Reset button LED |
10 |
Pullout asset card with chassis serial number, getting started guide QR code, and LTP QR code |
|
11 |
Eight fixed RJ-45 ports (NM-1)RJ-45 ports named Ethernet 1/1 through 1/8 left to right; for a list of supported SFPs. |
12 |
Eight fixed SFP+ ports (NM-1)SFP+ ports named Ethernet 1/9 through 1/16 left to right; for a list of supported SFPs. |
Rear View
|
1 |
Power on/off switch |
2 |
Power supply module (PSU-1) |
|
3 |
Power supply module FAIL LED (PSU-1) |
4 |
Fan module LED (FAN-1) |
|
5 |
Fan module (FAN-1) |
6 |
Fan module LED (FAN-2) |
|
7 |
Fan module (FAN-2) |
8 |
Power supply module (PSU-2) |
|
9 |
Power supply module FAIL LED (PSU-2) |
10 |
Chassis power LEDNote This power LED has the same behavior as the front panel LED. See Front Panel LEDs for more information. |
|
11 |
Power supply module OK LED (PSU-1) |
12 |
Power supply module connector (PSU-1) |
|
13 |
Power supply module OK LED (PSU-2) |
14 |
Power supply module connector (PSU-2) |
|
15 |
Two-post grounding padNote The two-post grounding lug and two screws are included in the accessory kit. |
— |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR3120-ASA-K9 | Product type | Cisco Secure Firewall 3120 ASA appliance |
| Firewall model | Secure Firewall 3120 | Security software role | Cisco Secure ASA |
| Rack units | 1RU | Dimensions | 1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm) |
| Fixed RJ-45 ports | 8 x 10M/100M/1GBASE-T Ethernet interfaces | Fixed SFP ports | 8 x 1/10 Gigabit Ethernet SFP interfaces |
| Maximum Ethernet ports | Up to 24 total Ethernet ports with network module | Network module slot | One removable network module slot |
| 3120 module options | 8 x 1/10G network module options | Management port | 1 x 1/10G SFP management port |
| Console port | 1 x RJ-45 console | USB port | 1 x USB 3.0 Type-A port |
| SSD storage | 1 x 900 GB SSD with 1 spare slot | Power supply configuration | Single 400W AC; dual 400W AC optional; DC optional |
| Power redundancy | 1+1 AC or DC with dual supplies | AC input voltage | 100 to 240V AC |
| AC maximum output power | 400W | DC input voltage | -48V to -60VDC |
| DC maximum output power | 400W | Fan modules | 2 hot-swappable fan modules with 2 fans each |
| Weight | 23 lb with 1 power supply 1 network module fan module and 1 SSD | Stateful inspection firewall throughput | 22 Gbps |
| Multiprotocol firewall throughput | 17 Gbps | Concurrent firewall connections | 4 million |
| New connections per second | 500000 | IPsec VPN throughput | 10 Gbps |
| Projected IPsec VPN with offload | 15.4 Gbps with ASA 9.18 | Maximum VPN peers | 7000 |
| Security contexts | 2 included; 100 maximum | High availability | Active/active and active/standby |
| Clustering | 8 chassis | ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator |
| Local management | Adaptive Security Device Manager | ASA introduction | ASA 9.17(1) introduced ASA for Secure Firewall 3110 3120 3130 and 3140 |
| ASA compatibility reference | ASA and ASDM compatibility listed per Secure Firewall 3120 model | Operating temperature | 32 to 104F (0 to 40C); designed to be NEBS ready, with certification pending |
| Operating humidity | 10 to 85% noncondensing | Operating altitude | 10000 ft maximum; the NEBS-ready operating profile extends to 13000 ft |
| Sound pressure | 65 dBA typical; 74 dBA maximum |
Quality Certifications
Customer Reviews
Questions & Answers
-
What throughput does FPR3120-ASA-K9 reach as an ASA firewall?
-
Does FPR3120-ASA-K9 run Threat Defense or ASA, and which licenses does it use?
-
How much system memory does FPR3120-ASA-K9 have?
-
How many SSD, power supply and fan module bays does FPR3120-ASA-K9 have, and how many are populated?
-
Which legacy network module PIDs does FPR3120-ASA-K9 not recognize?
-
What does a fully equipped FPR3120-ASA-K9 weigh for rack planning?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Got what we ordered, when we expected it. That’s all you can ask.
Reasonable pricing that still leaves room for vendor reliability.
Their consistency removes friction from our purchasing workflow.
To retake the network, you need strong defenses. This works.
Solid VPN concentrator. We have 2000 users on this. Rock solid uptime.