FPR3130-ASA-K9 – 42G ASA – 8x25G SFP28 + 8xRJ45 – 1RU 3130 ASA Firewall
Shop Expert-Recommended Accessories for the FPR3130-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4Original price was: $1,213.85.$258.00Current price is: $258.00. -
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°COriginal price was: $1,335.84.$95.30Current price is: $95.30. -
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial TemperatureOriginal price was: $2,787.19.$431.00Current price is: $431.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR3130-ASA-K9 Description
The FPR3130-ASA-K9 is a Cisco Secure Firewall 3130 ASA appliance in the Secure Firewall 3100 Series for internet edge and data center firewalls that run Cisco Secure ASA software. The appliance delivers 42 Gbps of stateful inspection throughput on 1500B UDP traffic and 14 Gbps of IPsec VPN with up to 15,000 peers, from eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot. The ASA image includes 2 security contexts, and more contexts up to 100 need add-on licenses.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR3130-ASA-K9 |
|
Product type |
Cisco Secure Firewall 3130 ASA appliance |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10/25G SFP fixed ports |
|
Network module bay |
1 removable network module slot |
|
Supported module speeds |
1G 10G 25G 40G and 100G options for 3130 and 3140 |
|
Storage |
1 x 900 GB SSD with 1 spare slot |
|
Power supply configuration |
Dual 400W AC; single or dual 400W DC optional |
|
Stateful inspection firewall throughput |
42 Gbps |
|
ASA multiprotocol firewall throughput |
39 Gbps |
|
Concurrent firewall connections |
6 million |
Product Performance
Key Features
The appliance runs the ASA image, managed locally through Adaptive Security Device Manager and centrally through Cisco Security Manager or Cisco Defense Orchestrator.
Eight RJ-45 ports sit beside eight fixed SFP ports that take 1G, 10G or 25G optics, so copper handoffs and fiber uplinks both come off the base unit.
The single bay takes 3130-class modules with eight 1/10/25G ports or four 40G ports, and the chassis tops out at 24 Ethernet ports.
Two contexts are included and the maximum is 100, so virtual firewall counts above two depend on add-on licenses.
IPsec VPN reaches 14 Gbps on 450B UDP traffic, rising to a projected 28 Gbps with ASA 9.18 offload, across up to 15,000 peers.
Dual 400W AC supplies run 1+1, DC supplies are optional, and two hot-swappable fan modules keep the chassis running if one fan fails.
Application Scenarios
At an enterprise internet edge, the firewall applies ASA stateful inspection policy to traffic arriving on the 1/10/25G SFP ports from upstream routers, and the RJ-45 ports connect DMZ servers directly.
A headquarters site terminating branch and remote-user tunnels can load the appliance with up to 15,000 VPN peers, and ASA 9.18 VPN offload raises the projected IPsec figure to 28 Gbps.
In a shared data center, each tenant or business unit can receive its own security context, with two included and up to 100 available, while the network module bay adds 40G ports toward the spine.
Product Comparison
|
Parameter |
FPR3130-ASA-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput |
42 Gbps |
Not applicable |
49 Gbps |
|
Stateful inspection firewall throughput (multiprotocol) |
39 Gbps |
Not applicable |
43 Gbps |
|
Concurrent firewall connections |
6 million |
Not applicable |
10 million |
|
New connections per second |
875,000 |
Not applicable |
1,100,000 |
|
IPsec VPN throughput (450B UDP L2L test) |
14 Gbps |
Not applicable |
17 Gbps |
|
Maximum VPN peers |
15,000 |
Not applicable |
20,000 |
|
Security contexts |
2 included; 100 maximum |
Not applicable |
2 included; 100 maximum |
|
Integrated I/O |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
|
Network modules |
8 x 1/10/25G, 4 x 40G options |
8 x 1/10/25G, 4 x 40G options |
8 x 1/10/25G, 4 x 40G options |
FPR3130-ASA-K9 and FPR3130-NGFW-K9 share the same 3130 chassis, eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot, but FPR3130-ASA-K9 runs Cisco Secure ASA while FPR3130-NGFW-K9 runs Threat Defense, so the software role decides between them first. When ASA must exceed 42 Gbps stateful throughput, 39 Gbps multiprotocol throughput, 6 million connections, 14 Gbps IPsec VPN or 15,000 VPN peers, order FPR3140-ASA-K9, which raises these to 49 Gbps, 43 Gbps, 10 million, 17 Gbps and 20,000, with 1.1 million new connections per second against 875,000. Both ASA models include 2 security contexts and allow up to 100.
Ordering Checklist
- Security contexts: ASA Base includes 2 security contexts; add L-FPR3K-ASASC-5= or L-FPR3K-ASASC-10= for more. Multi-context designs beyond 2 contexts need the add-on license on the order.
- Strong encryption: Add L-FPR3K-ENC-K9= if ASA strong encryption is required. It is a separate license and is export-controlled, so it cannot be fulfilled to restricted regions.
- Network module: Choose one of FPR3K-XNM-8X10G, FPR3K-XNM-8X25G, FPR3K-XNM-4X40G or FPR3K-XNM-2X100G for the single NetMod bay; FPR3K-NM-BLANK= covers an empty bay. The module is a separate line, and the bay holds only one.
- Power supplies: Choose dual 400W AC as standard, or single or dual 400W DC as the option. The power type is chosen on the order and decides which supplies arrive.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR3K-XNM-8X10G |
3100 Series 8-port 1G/10G SFP+ network module |
|
FPR3K-XNM-8X25G |
3100 Series 8-port 1/10/25G SFP network module |
|
FPR3K-XNM-4X40G |
3100 Series 4-port 40G QSFP+ network module |
|
FPR3K-XNM-2X100G |
3100 Series 2-port 100G QSFP28 network module |
|
FPR3K-XNM-8X1GF |
8-port 10/100/1000Base-T hardware bypass network module |
|
FPR3K-XNM-6X10SRF |
6-port 10G SFP SR multimode hardware bypass network module |
|
FPR3K-XNM-6X10LRF |
6-port 10G SFP LR single-mode hardware bypass network module |
|
L-FPR3K-ASASC-10= |
Cisco Secure Firewall 3100 add-on 10 security context licenses |
|
L-FPR3K-ASASC-5= |
Cisco Secure Firewall 3100 add-on 5 security context licenses |
|
L-FPR3K-ENC-K9= |
Strong encryption license for ASA on Cisco Secure Firewall 3100 Series |
|
Cisco Secure Firewall 3100 Series 400W AC power supply | |
|
Cisco Secure Firewall 3100 Series 900 GB SSD | |
|
FPR3K-SLIDE-RAILS= |
Cisco Secure Firewall 3100 Series slide rail kit |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR3130-ASA-K9 | Product type | Cisco Secure Firewall 3130 ASA appliance |
| Firewall model | Secure Firewall 3130 | Security software role | Cisco Secure ASA |
| Rack units | 1RU | Dimensions | 1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm) |
| Airflow | Front to rear; I/O side to non-I/O side | Fixed RJ-45 ports | 8 x 10M/100M/1GBASE-T Ethernet interfaces |
| Fixed SFP ports | 8 x 1/10/25 Gigabit Ethernet SFP interfaces | Maximum Ethernet ports | Up to 24 total Ethernet ports with network module |
| Network module slot | One removable network module slot named NM-2 | 3130 / 3140 module options | 8 x 1/10/25G, 4 x 40G, and 2 x 100G options |
| Management port | 1 x 1/10G SFP management port | Console port | 1 x RJ-45 serial console |
| USB port | 1 x USB 3.0 Type-A port | SSD storage | 1 x 900 GB SSD with 1 spare slot |
| Fan modules | 2 hot-swappable dual fan modules | Power supply configuration | Dual 400W AC; single or dual 400W DC optional |
| Power redundancy | 1+1 AC or DC with dual supplies | AC input voltage | 100 to 240V AC |
| AC maximum output power | 400W | DC input voltage | -48V to -60VDC |
| DC maximum output power | 400W | Stateful inspection firewall throughput | 42 Gbps |
| Multiprotocol firewall throughput | 39 Gbps | Concurrent firewall connections | 6 million |
| New connections per second | 875000 | IPsec VPN throughput | 14 Gbps |
| Projected IPsec VPN with offload | 28 Gbps with ASA 9.18 | Maximum VPN peers | 15000 |
| Security contexts | 2 included; 100 maximum | High availability | Active/active and active/standby |
| Clustering | 8 chassis | ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator |
| Local management | Adaptive Security Device Manager | Fixed port first supported release | Threat Defense 7.1 / ASA 9.17 for 3110 3120 3130 and 3140 |
| ASA compatibility reference | ASA and ASDM compatibility listed per Secure Firewall 3130 model | Operating temperature | 32 to 104F (0 to 40C) |
| Operating humidity | 10 to 85% noncondensing | Operating altitude | 10000 ft maximum |
| Sound pressure | 65 dBA typical; 74 dBA maximum |
Quality Certifications
Customer Reviews
Questions & Answers
-
What throughput does FPR3130-ASA-K9 reach as an ASA firewall?
-
Does FPR3130-ASA-K9 run Threat Defense or ASA, and which licenses does it use?
-
Which hardware-bypass network modules can FPR3130-ASA-K9 take besides the four listed in its ordering checklist?
-
What does a fully equipped FPR3130-ASA-K9 weigh for rack planning?
-
How much system memory does FPR3130-ASA-K9 have?
-
How loud is FPR3130-ASA-K9 in operation?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Our deployment schedule depends on accurate shipping. Layer23 delivered as promised.
We stretched our hardware budget further than we thought possible.
They keep their customers informed and engaged throughout the relationship. Invoice formatting was a bit different from what our AP system expects, but workable.