FPR3120-ASA-K9 – 22G ASA Firewall – 8xRJ45 8×1/10G SFP – 1RU 3120
1/mo Solds
Stable Global Supply Chain for Thriving Businesses.
- $3,000,000 Inventory
- Certified Cisco Partner ships
- Collaborating with FedEx, UPS, DHL
Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR3120-ASA-K9 Description
FPR3120-ASA-K9 is the Cisco Secure Firewall 3120 ASA firewall appliance, a 1RU Cisco Secure Firewall 3100 Series chassis ordered for deployments that run Cisco Secure ASA software.
The 3120 sits above the 3110 in the ASA sizing table while keeping the same fixed 8-port RJ-45 and 8-port 1/10G SFP base interface profile. It is not the FPR3120-NGFW-K9 Threat Defense order path, and the sizing work should stay tied to Cisco's Secure Firewall 3120 ASA row.
For quote review, keep the model tied to the ASA PID, then check the ASA and ASDM release pair, security-context or strong-encryption license need, 1/10G optics, 10G-class network module plan, 400W power build, regional cords, price, warranty support, and shipping destination.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR3120-ASA-K9 |
|
Product family |
Cisco Secure Firewall 3100 Series |
|
Product type |
Cisco Secure Firewall 3120 ASA appliance |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10G SFP fixed ports |
|
Network module slot |
1 removable network module slot |
|
Supported module profile |
8 x 1/10G network module options |
|
Storage |
1 x 900 GB SSD with 1 spare slot |
|
Power supply configuration |
Single 400W AC; dual 400W AC optional; DC optional |
|
Stateful inspection firewall throughput |
22 Gbps |
|
ASA multiprotocol firewall throughput |
17 Gbps |
|
Concurrent firewall connections |
4 million |
Product Performance
Key Features
Cisco identifies FPR3120-ASA-K9 as the Secure Firewall 3120 ASA chassis, which keeps the order separate from the FPR3120-NGFW-K9 Threat Defense appliance.
The 3120 ASA row raises stateful throughput, multiprotocol throughput, connection count, new-connection rate, IPsec VPN throughput, and VPN-peer scale above the 3110.
The platform combines eight RJ-45 Ethernet interfaces with eight 1/10G SFP interfaces, so cabling review should cover both copper handoffs and fiber optics.
Cisco lists the 3120 with 8 x 1/10G network-module options, while 25G, 40G, and 100G expansion planning belongs to the 3130 and 3140 hardware class.
The ASA order path can involve optional 3100 Series security-context add-ons and a strong-encryption license, both of which are separate from the chassis PID.
Cisco calls out the FPR-3120 platform for NEBS-ready operating limits, making the 3120 row a distinct choice when environmental and site standards are part of the purchase review.
Application Scenarios
Choose FPR3120-ASA-K9 when the approved design stays on Cisco Secure ASA and the sizing worksheet needs more connection and VPN scale than the 3110 ASA appliance.
Use this model for an edge or data-center perimeter design that needs fixed RJ-45 ports, fixed 1/10G SFP ports, and one Cisco-listed 1/10G network-module bay.
Select the ASA PID when asset records, software operations, and support coverage name Cisco Secure ASA; use FPR3120-NGFW-K9 only when the bill of materials requires Threat Defense.
Product Comparison
|
Parameter |
FPR3120-ASA-K9 | |||
|---|---|---|---|---|
|
Product family |
Secure Firewall 3100 Series |
Secure Firewall 3100 Series |
Secure Firewall 3100 Series |
Secure Firewall 3100 Series |
|
Cisco PID description |
Cisco Secure Firewall 3110 ASA Appliance, 1RU |
Cisco Secure Firewall 3120 ASA Appliance, 1RU |
Cisco Secure Firewall 3120 Appliance with Threat Defense software |
Cisco Secure Firewall 3130 ASA Appliance, 1RU |
|
Firewall model |
Secure Firewall 3110 |
Secure Firewall 3120 |
Secure Firewall 3120 |
Secure Firewall 3130 |
|
Security software role |
Cisco Secure ASA |
Cisco Secure ASA |
Threat Defense / NGFW |
Cisco Secure ASA |
|
Form factor |
1RU |
1RU |
1RU |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10G SFP |
8 x RJ-45 and 8 x 1/10/25G SFP |
|
Network module profile |
8 x 1/10G options |
8 x 1/10G options |
8 x 1/10G options |
1G 10G 25G 40G and 100G options |
|
ASA stateful firewall throughput |
18 Gbps |
22 Gbps |
Not an ASA SKU |
42 Gbps |
|
ASA multiprotocol firewall throughput |
15 Gbps |
17 Gbps |
Not an ASA SKU |
39 Gbps |
|
Concurrent firewall connections |
2 million |
4 million |
Not an ASA SKU |
6 million |
|
New connections per second |
300000 |
500000 |
Not an ASA SKU |
875000 |
|
ASA IPsec VPN throughput |
8 Gbps |
10 Gbps |
Not an ASA SKU |
14 Gbps |
|
Maximum VPN peers |
3000 |
7000 |
Not an ASA SKU |
15000 |
|
Security contexts |
2 included; 100 maximum |
2 included; 100 maximum |
Not an ASA SKU |
2 included; 100 maximum |
|
Clustering |
8 chassis |
8 chassis |
Threat Defense clustering profile |
8 chassis |
|
Power supply configuration |
Single 400W AC; dual AC optional; DC optional |
Single 400W AC; dual AC optional; DC optional |
Single 400W AC; dual AC optional; DC optional |
Dual 400W AC; DC optional |
- In a FPR3120-ASA-K9 vs FPR3110-ASA-K9 comparison, both models keep the 1RU ASA appliance role and 1/10G fixed-port profile, but the 3120 increases the ASA throughput, connection, new-connection, IPsec VPN, and VPN-peer rows.
- The FPR3120-ASA-K9 vs FPR3120-NGFW-K9 difference is the software order role: the current SKU is the Cisco Secure ASA appliance, while the NGFW PID is the Threat Defense appliance for the same 3120 hardware class.
- For FPR3120-ASA-K9 vs FPR3130-ASA-K9, the 3130 shifts to 1/10/25G fixed SFP ports and higher ASA capacity values, while the 3120 remains the 1/10G-focused ASA tier.
- Buyers comparing which model to choose should match the software role first, then choose the 3110, 3120, or 3130 ASA row that meets the verified sizing requirement.
Selection Guide
1. Keep the line item on the ASA PID
Choose FPR3120-ASA-K9 when the operating model, migration plan, or support record requires Cisco Secure ASA rather than Threat Defense.
2. Size from the 3120 ASA row
Select this SKU when the design target maps to 22 Gbps stateful throughput, 17 Gbps multiprotocol throughput, or 4 million concurrent firewall connections.
3. Move down or up only for measured capacity reasons
Use FPR3110-ASA-K9 when the lower ASA values are enough, and compare FPR3130-ASA-K9 when the project needs 25G fixed SFP ports or a larger Cisco ASA sizing row.
4. Close the BOM around software and interfaces
Verify ASA and ASDM compatibility, security-context entitlement, strong-encryption requirements, 1/10G optics, 1/10G network modules, 400W power supplies, and regional cords before releasing the order.
Ordering Checklist
|
Review Area |
Required Decision |
Source-Based Risk |
|---|---|---|
|
Exact appliance PID |
Confirm FPR3120-ASA-K9 rather than FPR3120-NGFW-K9 |
Cisco lists separate ASA and Threat Defense orderable PIDs for the 3120 |
|
ASA release pair |
Match the selected ASA version to a compatible ASDM version |
Cisco compatibility tables list Secure Firewall 3120 by ASA and ASDM release |
|
Capacity row |
Use the 3120 ASA values for throughput, connection count, VPN throughput, and VPN peers |
Values from another firewall family or software role can mis-size the order |
|
Interface media |
Validate 1G copper handoffs and every 1/10G SFP optic |
The 3120 fixed SFP profile is not the 25G profile used by the 3130 and 3140 |
|
Network module |
Keep expansion to Cisco-supported 1/10G options for this model |
Higher-speed modules can move the requirement to a different 3100 Series hardware tier |
|
ASA licenses |
Decide whether included contexts are enough and whether strong encryption must be ordered |
Security-context and encryption licenses are separate Cisco order lines |
|
Power and site readiness |
Confirm single or dual 400W AC, optional DC power, cords, rack hardware, price, warranty support, and shipping destination |
Installation depends on matching power input, redundancy, and regional cord choices |
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR3K-XNM-8X10G |
3100 Series 8-port 1G/10G SFP+ network module |
|
FPR3K-XNM-8X10G= |
3100 Series 8-port 1G/10G SFP+ network module spare |
|
FPR3K-XNM-8X1GF |
8-port 10/100/1000Base-T hardware bypass network module |
|
FPR3K-XNM-6X1SXF |
6-port 1G SFP SX multimode hardware bypass network module |
|
FPR3K-XNM-6X10SRF |
6-port 10G SFP SR multimode hardware bypass network module |
|
FPR3K-XNM-6X10LRF |
6-port 10G SFP LR single-mode hardware bypass network module |
|
L-FPR3K-ASASC-10= |
Cisco Secure Firewall 3100 add-on 10 security context licenses |
|
L-FPR3K-ASASC-5= |
Cisco Secure Firewall 3100 add-on 5 security context licenses |
|
L-FPR3K-ENC-K9= |
License to enable strong encryption for ASA on Cisco Secure Firewall 3100 Series |
|
FPR3K-PWR-AC-400= |
Cisco Secure Firewall 3100 Series 400W AC power supply |
|
FPR3K-PWR-DC-400= |
Cisco Secure Firewall 3100 Series 400W DC power supply |
|
FPR3K-FAN= |
Cisco Secure Firewall 3100 Series fan tray |
|
FPR3K-SSD900= |
Cisco Secure Firewall 3100 Series SSD for FPR 3100 Series |
|
FPR3K-SLIDE-RAILS= |
Cisco Secure Firewall 3100 Series slide rail kit |
Front View
|
1 |
RJ-45 console port |
2 |
Recessed factory reset button |
|
3 |
SSD-1 |
4 |
SSD-2 |
|
5 |
Network module (NM-2) |
6 |
System LEDs |
|
7 |
Type A USB 3.1 port |
8 |
Gigabit Ethernet management port:Secure Firewall Threat Defense—Management 0 (also referred to as Management 1/1 and Diagnostic 1/1)ASA—Management 1/1 |
|
9 |
Reset button LED |
10 |
Pullout asset card with chassis serial number, getting started guide QR code, and LTP QR code |
|
11 |
Eight fixed RJ-45 ports (NM-1)RJ-45 ports named Ethernet 1/1 through 1/8 left to right; for a list of supported SFPs. |
12 |
Eight fixed SFP+ ports (NM-1)SFP+ ports named Ethernet 1/9 through 1/16 left to right; for a list of supported SFPs. |
Rear View
|
1 |
Power on/off switch |
2 |
Power supply module (PSU-1) |
|
3 |
Power supply module FAIL LED (PSU-1) |
4 |
Fan module LED (FAN-1) |
|
5 |
Fan module (FAN-1) |
6 |
Fan module LED (FAN-2) |
|
7 |
Fan module (FAN-2) |
8 |
Power supply module (PSU-2) |
|
9 |
Power supply module FAIL LED (PSU-2) |
10 |
Chassis power LEDNote This power LED has the same behavior as the front panel LED. See Front Panel LEDs for more information. |
|
11 |
Power supply module OK LED (PSU-1) |
12 |
Power supply module connector (PSU-1) |
|
13 |
Power supply module OK LED (PSU-2) |
14 |
Power supply module connector (PSU-2) |
|
15 |
Two-post grounding padNote The two-post grounding lug and two screws are included in the accessory kit. |
— |
Specifications
Packaging weight and dimensions included:| Weight | 27.94 kg |
|---|---|
| Dimensions | 80 × 59 × 25 cm |
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR3120-ASA-K9 | Product Family | Cisco Secure Firewall 3100 Series |
| Product Type | Cisco Secure Firewall 3120 ASA appliance | Firewall Model | Secure Firewall 3120 |
| Security Software Role | Cisco Secure ASA | Form Factor | 1RU |
| Dimensions | 1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm) | Fixed RJ-45 Ports | 8 x 10M/100M/1GBASE-T Ethernet interfaces |
| Fixed SFP Ports | 8 x 1/10 Gigabit Ethernet SFP interfaces | Maximum Ethernet Ports | Up to 24 total Ethernet ports with network module |
| Network Module Slot | One removable network module slot | 3120 Module Options | 8 x 1/10G network module options |
| Management Port | 1 x 1/10G SFP management port | Console Port | 1 x RJ-45 console |
| USB Port | 1 x USB 3.0 Type-A port | Storage | 1 x 900 GB SSD with 1 spare slot |
| Power Supply Configuration | Single 400W AC; dual 400W AC optional; DC optional | Power Redundancy | 1+1 AC or DC with dual supplies |
| AC Input Voltage | 100 to 240V AC | AC Maximum Output Power | 400W |
| DC Input Voltage | -48V to -60VDC | DC Maximum Output Power | 400W |
| Fan Modules | 2 hot-swappable fan modules with 2 fans each | Chassis Weight | 23 lb with 1 power supply 1 network module fan module and 1 SSD |
| Stateful Inspection Firewall Throughput | 22 Gbps | Multiprotocol Firewall Throughput | 17 Gbps |
| Concurrent Firewall Connections | 4 million | New Connections Per Second | 500000 |
| IPsec VPN Throughput | 10 Gbps | Projected IPsec VPN with Offload | 15.4 Gbps with ASA 9.18 |
| Maximum VPN Peers | 7000 | Security Contexts | 2 included; 100 maximum |
| High Availability | Active/active and active/standby | Clustering | 8 chassis |
| ASA Centralized Management | Cisco Security Manager or Cisco Defense Orchestrator | Local Management | Adaptive Security Device Manager |
| ASA Introduction | ASA 9.17(1) introduced ASA for Secure Firewall 3110 3120 3130 and 3140 | ASA Compatibility Reference | ASA and ASDM compatibility listed per Secure Firewall 3120 model |
| Operating Temperature | 32 to 104F (0 to 40C); NEBS operation limits documented for FPR-3120 | Operating Humidity | 10 to 85% noncondensing |
| Operating Altitude | 10000 ft maximum or documented NEBS operation up to 13000 ft | Sound Pressure | 65 dBA typical; 74 dBA maximum |
Get More Information
Need pricing, stock, or shipping details for the FPR3120-ASA-K9 ? Layer23-Switch can help you check current availability, lead time, and delivery options for this. Send us the part number, quantity, and destination country via live chat or email sales@layer23-switch.com for a fast quotation.
Quality Certifications
Customer Reviews
Questions & Answers
-
Which ASA scale tier defines FPR3120-ASA-K9?
-
What connection scale separates FPR3120-ASA-K9 from FPR3110-ASA-K9?
-
Which fixed ports are built into FPR3120-ASA-K9?
-
Why choose FPR3120-ASA-K9 for VPN-heavy ASA sites?
-
Does FPR3120-ASA-K9 support 3100-series clustering?
-
What management choice applies to FPR3120-ASA-K9 in ASA mode?
-
Which migration question appears around FPR3120-ASA-K9?
-
Which interface assumption misplaces FPR3120-ASA-K9?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Device Authenticity & Lifecycle Verification
Verify Cisco hardware by serial number and check lifecycle status before deployment.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.
Got what we ordered, when we expected it. That’s all you can ask.
Reasonable pricing that still leaves room for vendor reliability.
Their consistency removes friction from our purchasing workflow.
To retake the network, you need strong defenses. This works.
Solid VPN concentrator. We have 2000 users on this. Rock solid uptime.