Your cart is currently empty!
FPR3120-ASA-K9 – Cisco Firepower 3120 ASA
1/mo Solds
Stable Global Supply Chain for Thriving Businesses.
- $3,000,000 Inventory
- Certified Cisco Partner ships
- Collaborating with FedEx, UPS, DHL

Established Global IT Distributor
With over a decade of industry experience, we are a certified Cisco Partner delivering genuine enterprise networking hardware and trusted services to system integrators, ISPs, and enterprises worldwide.
FPR3120-ASA-K9 Description
The Cisco FPR3120-ASA-K9, also called the Secure Firewall 3120 ASA appliance, is a high-performance firewall platform built on Cisco’s ASA software. Delivering up to 60 Gbps stateful firewall throughput (30 Gbps multiprotocol), it is designed for large enterprises, data centers, and service providers that demand scalable and resilient perimeter security.The FPR3120 supports 15 million concurrent sessions and 250,000 new connections per second, ensuring low latency performance under the heaviest workloads. For secure connectivity, it provides 12 Gbps IPsec VPN throughput and supports up to 20,000 VPN peers, making it ideal for large-scale remote access and site-to-site VPN deployments.
Product Highlights
Key Features
High-Capacity ASA Firewall
Provides up to 60 Gbps stateful firewall throughput (30 Gbps multiprotocol), the most powerful ASA option in the 3100 Series, built for large-scale deployments.
Massive Session Scale
Handles 15 million concurrent sessions and 250,000 new connections per second, ensuring stability in data center or WAN edge environments with heavy user traffic.
Secure Remote Connectivity
Supports 12 Gbps IPsec VPN throughput and up to 20,000 VPN peers, ideal for global enterprises requiring large-scale remote access and site-to-site VPNs.
Enterprise-Grade Resiliency
Supports Active/Active and Active/Standby high availability plus clustering for up to 8 appliances, delivering seamless redundancy and horizontal scalability.
Multi-Tenant Segmentation
Ships with 2 security contexts (expandable to 250), enabling service providers, MSSPs, and enterprises to securely isolate tenants, departments, or workloads.
Flexible Management
Local configuration via Cisco ASDM and centralized policy control with Cisco Security Manager or Cisco Defense Orchestrator (CDO) for enterprise-wide deployments.
Applications Scenarios
Best suited for environments requiring 60 Gbps firewall capacity, multi-million session handling, and carrier-grade reliability.
Designed for industries needing strong VPN scale, compliance-ready segmentation, and high availability for mission-critical operations.
With 250 security contexts and 8-unit clustering, the FPR3120-ASA is ideal for managed firewall services and multi-tenant hosting environments.
Front View

|
1 4884_33332e-6c> |
RJ-45 console port 4884_db3d02-ce> |
2 4884_629942-b4> |
Recessed factory reset button 4884_3f325b-b2> |
|
3 4884_065f49-47> |
SSD-1 4884_e7f810-4f> |
4 4884_83e287-4c> |
SSD-2 4884_c42cdc-d2> |
|
5 4884_0cff40-24> |
Network module (NM-2) 4884_9684b7-9d> |
6 4884_b7b684-74> |
System LEDs 4884_df17c9-65> |
|
7 4884_e8a06a-cf> |
Type A USB 3.1 port 4884_8dd991-77> |
8 4884_26a76f-4d> |
Gigabit Ethernet management port:Secure Firewall Threat Defense—Management 0 (also referred to as Management 1/1 and Diagnostic 1/1)ASA—Management 1/1 4884_1ea217-c8> |
|
9 4884_eb3824-3a> |
Reset button LED 4884_c08a21-00> |
10 4884_c29586-e6> |
Pullout asset card with chassis serial number, getting started guide QR code, and LTP QR code 4884_b0e89f-9b> |
|
11 4884_af512b-e2> |
Eight fixed RJ-45 ports (NM-1)RJ-45 ports named Ethernet 1/1 through 1/8 left to right; for a list of supported SFPs. 4884_970c6f-39> |
12 4884_e6bd32-8a> |
Eight fixed SFP+ ports (NM-1)SFP+ ports named Ethernet 1/9 through 1/16 left to right; for a list of supported SFPs. 4884_843450-3c> |
Rear View
|
1 4884_e459cf-45> |
Power on/off switch 4884_3a1847-78> |
2 4884_d0700e-ae> |
Power supply module (PSU-1) 4884_0a7794-90> |
|
3 4884_273fdf-d9> |
Power supply module FAIL LED (PSU-1) 4884_0ad398-d5> |
4 4884_626af7-1a> |
Fan module LED (FAN-1) 4884_666837-e2> |
|
5 4884_7340dc-a4> |
Fan module (FAN-1) 4884_e3b35e-d9> |
6 4884_165e15-ca> |
Fan module LED (FAN-2) 4884_b76efb-53> |
|
7 4884_f859c5-37> |
Fan module (FAN-2) 4884_bfb8ef-44> |
8 4884_df06ff-fb> |
Power supply module (PSU-2) 4884_c28d0b-99> |
|
9 4884_4af0a8-4c> |
Power supply module FAIL LED (PSU-2) 4884_548a2e-a6> |
10 4884_7a2350-c5> |
Chassis power LEDNote This power LED has the same behavior as the front panel LED. See Front Panel LEDs for more information. 4884_ff1a7f-7e> |
|
11 4884_498632-ba> |
Power supply module OK LED (PSU-1) 4884_0edeb9-b9> |
12 4884_483061-33> |
Power supply module connector (PSU-1) 4884_59ddd5-c1> |
|
13 4884_7b135e-92> |
Power supply module OK LED (PSU-2) 4884_6a6f2e-b4> |
14 4884_3d2cdc-f6> |
Power supply module connector (PSU-2) 4884_b27653-36> |
|
15 4884_817739-6c> |
Two-post grounding padNote The two-post grounding lug and two screws are included in the accessory kit. 4884_3d648c-82> | 4884_8f1710-bd> |
— 4884_b80399-cd> |
Model Selection Guide – FPR3120-ASA-K9
|
Deployment Requirement 4884_d24eb2-19> |
FPR3120-ASA Suitability & Recommendation 4884_2065c8-40> |
|---|---|
|
Firewall throughput ≥60 Gbps 4884_16520f-05> |
✔ Yes – Delivers 60 Gbps firewall throughput, perfect for large enterprise or data center perimeters. 4884_fe4192-e7> |
|
Concurrent sessions / CPS 4884_5d31fa-72> |
✔ Excellent – 15M sessions and 250K CPS, supports high-density WAN edge deployments. 4884_6d349a-28> |
|
Large VPN scale 4884_a1ebda-85> |
✔ Strong – Up to 20,000 VPN peers and 12 Gbps IPsec throughput, enabling global secure connectivity. 4884_6beb59-d0> |
|
High availability & clustering 4884_e7b1fe-d1> |
✔ Enterprise-grade – Active/Active and Active/Standby HA; clustering supported up to 8 appliances. 4884_013b4f-7d> |
|
Multi-tenant segmentation 4884_3fbc2b-01> |
✔ Suitable – 2 contexts included, expandable to 250, ideal for MSSPs and enterprises with strict segmentation. 4884_afddb1-ba> |
|
Interface connectivity 4884_32b2e5-1e> |
✔ Flexible – 8×RJ-45 + 8×10G SFP+ ports, expandable to 24 with module. 4884_fce010-49> |
|
Power redundancy 4884_e1566b-c1> |
✔ Strong – Supports dual AC or dual DC PSU, hot-swappable fans for maximum uptime. 4884_9d8b88-6f> |
|
Management model 4884_382e4c-c8> |
✔ Flexible – Local via ASDM; centralized via Cisco Security Manager or CDO. 4884_e54fe7-d7> |
Summary Recommendation
Product Comparison
|
Key Parameter 4884_78d14d-02> | 4884_1bd26e-41> | 4884_36e8a5-ed> |
FPR3120-ASA-K9 4884_e2b60d-03> |
|---|---|---|---|
|
Stateful FW throughput 4884_dcb500-ad> |
20 Gbps 4884_a2381b-44> |
45 Gbps 4884_626700-49> |
60 Gbps 4884_a325e7-e6> |
|
Multiprotocol throughput 4884_40c1cf-eb> |
10 Gbps 4884_919545-8d> |
25 Gbps 4884_9954d1-6b> |
30 Gbps 4884_9062c5-fc> |
|
Concurrent connections 4884_ded312-04> |
2.0 M 4884_8e6b64-69> |
6.0 M 4884_257399-03> |
15.0 M 4884_4e5726-5b> |
|
New connections/s 4884_1ec1c6-37> |
90K 4884_19d1cf-f2> |
200K 4884_5243b3-3d> |
250K 4884_00bfaa-a8> |
|
IPsec VPN throughput 4884_4eef3d-ac> |
5.5 Gbps 4884_efd10a-53> |
8.5 Gbps 4884_3a5e7b-de> |
12 Gbps 4884_0c23f3-48> |
|
Max VPN peers 4884_dc287a-55> |
2,000 4884_2d64ae-13> |
10,000 4884_e59b48-7a> |
20,000 4884_9d8431-df> |
|
Security contexts 4884_a0e655-4f> |
2; up to 100 4884_962520-9d> |
2; up to 100 4884_c535fb-b2> |
2; up to 250 4884_d1b947-d5> |
|
HA modes 4884_294fdd-0a> |
A/A & A/S 4884_e73af9-ba> |
A/A & A/S 4884_48995a-ed> |
A/A & A/S 4884_2f1373-18> |
|
Clustering 4884_c49881-11> |
No 4884_8953b2-fd> |
Yes (up to 8) 4884_c29892-ea> |
Yes (up to 8) 4884_817acf-c7> |
|
Integrated I/O 4884_bfe910-81> |
8×RJ45 + 8×SFP+ 4884_1eece7-25> |
8×RJ45 + 8×SFP+ 4884_4e16fe-6f> |
8×RJ45 + 8×SFP+ 4884_5b8553-88> |
|
Power & redundancy 4884_1bda3e-c3> |
400W AC, opt. dual 4884_f199a3-12> |
400W AC, dual opt. 4884_fc5ff1-cc> |
400W AC (dual opt.), DC opt. 4884_f0e5ff-36> |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Form Factor | 1RU | Dimensions (H×W×D) | 1.75 × 17 × 20 in (4.4 × 43.3 × 50.8 cm) |
| Integrated Interfaces | 8 × 1G RJ-45, 8 × 1/10G SFP+ | Optional Module | 8 × 1/10G NM |
| Max Interfaces | Up to 24 ports | Mgmt Port | 1 × 1/10G SFP |
| Console | RJ-45 | USB | 1 × USB 3.0 Type-A |
| Storage | 1 × 900 GB SSD (1 spare slot) | Weight | 23 lb (10.5 kg) |
| ASA Stateful FW | 60 Gbps | ASA Multiprotocol FW | 30 Gbps |
| ASA New Connections/s | 250,000 | ASA Concurrent Sessions | 15.0 million |
| ASA IPsec VPN Throughput | 12 Gbps | ASA Max VPN Peers | 20,000 |
| ASA Security Contexts | 2 included; up to 250 | ASA High Availability | Active/Active & Active/Standby |
| Clustering | Supported, up to 8 chassis | Management | ASDM local; CSM / CDO central |
| Power Supply | 400W AC (dual optional) | DC Power | Optional dual 400W DC |
| AC Input | 100–240V AC; <6A @ 100V | Efficiency | >89% @ 50% load |
| Fans | 2 hot-swappable modules | Noise | 65–74 dBA |
| Operating Temp | 0–40°C (32–104°F) | Operating Humidity | 10–85% non-condensing |
Get More Information
Discover unbeatable prices and fast shipping for the FPR3120-ASA-K9 Access the detailed FPR3120-ASA-K9 datasheet and ensure you’re getting the best deal with our reliable delivery service. Need assistance? Our free live chat support is here to help. For more information about the product and pricing, contact us via Live chat or email us at [email protected]
Quality Certifications
Customer Reviews
Questions & Answers
-
What is FPR3120-ASA-K9 used for?
-
How does FPR3120-ASA-K9 differ from FPR3120-NGFW-K9?
-
Can FPR3120-ASA-K9 be converted to FTD later?
-
Is HA supported on FPR3120-ASA-K9?
-
What VPN options exist on FPR3120-ASA-K9?
-
Does FPR3120-ASA-K9 support virtual contexts?
-
How is logging and monitoring handled?
-
What optics are typical on FPR3120-ASA-K9?
Warranty
Layer23-switch.com provides high-quality products at low wholesale prices
All items are ORIGINAL and GENUINE only.
Item conditions are "New Sealed" or "Used / Refurbished".
Used & refurbished items are fully tested with good conditions by Cisco-certified Engineers.
Our FREE Cisco CCIE Expert Consultancy Support is over the phone, by chat, by email or by login remotely.
You can contact our customer service team to exchange or return any product that you bought from us.
Standard Services
Personalized Service, Superior Product Maintenance for Ultimate Satisfaction.
- Projects and Technical Support
- Easy Purchasing Supply
- Product Lifecycle Protection
- Exclusive F3 Team Support
Customized Support for Your Needs with CCIE, HCIE, HPE ASE, etc.












To retake the network, you need strong defenses. This works.
Solid VPN concentrator. We have 2000 users on this. Rock solid uptime.
Good packaging. No damage in transit.