FPR3130-NGFW-K9 – 38G NGFW – 8x25G SFP28 + 8xRJ45 – 1RU 3130 NGFW Firewall
Shop Expert-Recommended Accessories for the FPR3130-NGFW-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4Original price was: $1,213.85.$258.00Current price is: $258.00. -
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°COriginal price was: $1,335.84.$95.30Current price is: $95.30. -
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial TemperatureOriginal price was: $2,787.19.$431.00Current price is: $431.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR3130-NGFW-K9 Description
The FPR3130-NGFW-K9 is a Cisco Secure Firewall 3130 next-generation firewall appliance in the Secure Firewall 3100 Series for internet edge and branch or campus security tiers that run Cisco Secure Firewall Threat Defense. The appliance delivers 38 Gbps of FW + AVC + IPS throughput on 1024B traffic and 17.8 Gbps of IPsec VPN with up to 15,000 peers, from eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot. The Threat Defense image is separate from the ASA image, and Malware, URL Filtering and IPS features depend on subscriptions.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR3130-NGFW-K9 |
|
Product type |
Cisco Secure Firewall 3130 NGFW appliance |
|
Security software role |
Cisco Secure Firewall Threat Defense |
|
Form factor |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10/25G SFP fixed ports |
|
Network module slot |
1 removable network module slot |
|
Firewall throughput |
42 Gbps |
|
FW + AVC + IPS throughput |
38 Gbps |
|
Concurrent sessions with AVC |
6 million |
|
New connections per second with AVC |
240000 |
|
IPsec VPN throughput |
17.8 Gbps |
|
Power supply configuration |
Dual 400W AC; single or dual 400W DC optional |
Product Performance
Key Features
With firewall, AVC and IPS enabled the appliance sustains 38 Gbps on 1024B traffic, and TLS inspection runs at 9.1 Gbps with 50% TLS 1.2 traffic.
Up to six million concurrent sessions with AVC and 240,000 new connections per second set the ceiling for large server populations and busy edge links.
IPsec VPN reaches 17.8 Gbps, with a projected 33 Gbps under Threat Defense 7.2 VPN offload and support for up to 15,000 peers.
Eight RJ-45 ports and eight fixed SFP ports for 1G, 10G or 25G optics come on the base chassis, and one module bay extends that to 24 ports.
Firewall Device Manager covers local management, Firewall Management Center or Cisco Defense Orchestrator handle central control, and up to eight chassis can form a cluster.
Dual 400W AC supplies run 1+1 with optional DC supplies, and two hot-swappable fan modules cool the 1RU chassis front to rear.
Application Scenarios
On a campus internet edge, the appliance inspects north-south traffic with firewall, Application Visibility and Control and IPS enabled at 38 Gbps, with 25G SFP ports facing the upstream routers.
A data center perimeter can use the six million concurrent sessions with AVC to hold large server populations behind the firewall, while the network module bay adds 40G ports toward the core.
The 3100 Series can also run in dedicated IPS mode, so a security team can place the appliance inline on a monitored segment and inspect traffic without routing it.
Product Comparison
|
Parameter |
FPR3130-NGFW-K9 | ||
|---|---|---|---|
|
Firewall throughput |
42 Gbps |
Not applicable |
49 Gbps |
|
Throughput: FW + AVC + IPS (1024B) |
38 Gbps |
Not applicable |
45 Gbps |
|
Maximum concurrent sessions, with AVC |
6 million |
Not applicable |
10 million |
|
Maximum new connections per second, with AVC |
240,000 |
Not applicable |
300,000 |
|
IPsec VPN throughput (1024B TCP w/Fastpath) |
17.8 Gbps |
Not applicable |
22.4 Gbps |
|
Maximum VPN peers |
15,000 |
Not applicable |
20,000 |
|
Integrated I/O |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
|
Network modules |
8 x 1/10/25G, 4 x 40G options |
8 x 1/10/25G, 4 x 40G options |
8 x 1/10/25G, 4 x 40G options |
|
Power supply configuration |
Dual 400W AC; single or dual 400W DC optional |
Dual 400W AC; single or dual 400W DC optional |
Dual 400W AC; single or dual 400W DC optional |
FPR3130-NGFW-K9 and FPR3130-ASA-K9 share the same 3130 chassis, eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot, but FPR3130-NGFW-K9 runs Threat Defense while FPR3130-ASA-K9 runs Cisco Secure ASA, so the software role decides between them first. When Threat Defense must exceed 38 Gbps of FW + AVC + IPS throughput, 6 million sessions with AVC, 240,000 new connections per second or 17.8 Gbps of IPsec VPN, order FPR3140-NGFW-K9, which raises these to 45 Gbps, 10 million, 300,000 and 22.4 Gbps. Threat Defense subscriptions are ordered as separate lines from the appliance.
Ordering Checklist
- Threat Defense subscription: Add L-FPR3130T- Threat Defense PIDs (T, TC, TM, TMC, URL or AMP) with a 1, 3 or 5 year term. Threat (T) is required before Malware (M) or URL (C) can be used, and the appliance PID alone carries no subscription.
- Smart Licensing account: Make sure a Smart Software Manager account exists before Threat Defense software is ordered. Ordered licenses are deposited into that account after the order.
- Network module: Choose one of FPR3K-XNM-8X10G, FPR3K-XNM-8X25G, FPR3K-XNM-4X40G or FPR3K-XNM-2X100G for the single NetMod bay; FPR3K-NM-BLANK= covers an empty bay. The module is a separate line, and the bay holds only one.
- Power supplies: Choose dual 400W AC as standard, or single or dual 400W DC as the option. The power type is chosen on the order and decides which supplies arrive.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR3K-XNM-8X10G |
3100 Series 8-port 1G/10G SFP+ network module |
|
FPR3K-XNM-8X25G |
3100 Series 8-port 1/10/25G ZSFP network module |
|
FPR3K-XNM-4X40G |
3100 Series 4-port 40G QSFP+ network module |
|
FPR3K-XNM-2X100G |
3100 Series 2-port 100G QSFP28 network module |
|
FPR3K-XNM-8X1GF |
8-port 10/100/1000Base-T hardware bypass network module |
|
L-FPR3130T-AMP-1Y |
Cisco Secure Firewall 3130 Threat Defense Malware Protection 1Y subscription |
|
L-FPR3130T-T-1Y |
Cisco Secure Firewall 3130 Threat Defense Threat Protection 1Y subscription |
|
L-FPR3130T-URL-1Y |
Cisco Secure Firewall 3130 Threat Defense URL Filtering 1Y subscription |
|
L-FPR3130T-TMC-1Y |
Cisco Secure Firewall 3130 Threat Defense Threat, Malware, and URL 1Y subscription |
|
Cisco Secure Firewall 3100 Series 400W AC power supply | |
|
Cisco Secure Firewall 3100 Series 900 GB SSD | |
|
FPR3K-SLIDE-RAILS= |
Cisco Secure Firewall 3100 Series slide rail kit |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR3130-NGFW-K9 | Product type | Cisco Secure Firewall 3130 NGFW appliance |
| Firewall model | Secure Firewall 3130 | Security software role | Cisco Secure Firewall Threat Defense |
| Rack units | 1RU | Dimensions | 1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm) |
| Airflow | Front to rear; I/O side to non-I/O side | Fixed RJ-45 ports | 8 x 10M/100M/1GBASE-T Ethernet interfaces |
| Fixed SFP ports | 8 x 1/10/25 Gigabit Ethernet SFP interfaces | Management port | 1 x 1/10G SFP management port |
| Console port | 1 x RJ-45 serial console | USB port | 1 x USB 3.0 Type-A port |
| Network module slot | One removable network module slot | Supported module types | 8-port 1/10G, 8-port 1/10/25G, 4-port 40G, and 2-port 100G network modules |
| 100G module support | FPR3K-XNM-2X100G supported on 3130 and 3140 | SSD storage | 1 x 900 GB SSD with 1 spare slot |
| Fan modules | 2 hot-swappable fan modules with 2 fans each | Power supply configuration | Dual 400W AC; single or dual 400W DC optional |
| Power redundancy | 1+1 AC or DC with dual supplies | AC input voltage | 100 to 240V AC |
| AC maximum output power | 400W | DC input voltage | -48V to -60VDC |
| DC maximum output power | 400W | Firewall throughput | 42 Gbps |
| FW + AVC throughput | 38 Gbps | FW + AVC + IPS throughput | 38 Gbps |
| NGIPS throughput | 38 Gbps | Concurrent sessions with AVC | 6 million |
| New connections with AVC | 240000 per second | TLS throughput | 9.1 Gbps |
| IPsec VPN throughput | 17.8 Gbps | Projected IPsec VPN with offload | 33 Gbps with FTD 7.2 |
| Maximum VPN peers | 15000 | On-Device management | Supported |
| Centralized management | Firewall Management Center or Cisco Defense Orchestrator | Operating temperature | 32 to 104F (0 to 40C) |
| Operating humidity | 10 to 85% noncondensing | Operating altitude | 10000 ft maximum |
| Power cord requirement | Approved Secure Firewall 3100 power cord or jumper power cord |
Quality Certifications
Customer Reviews
Questions & Answers
-
What throughput does FPR3130-NGFW-K9 reach with firewall, AVC and IPS enabled?
-
Do Malware, URL Filtering and IPS on FPR3130-NGFW-K9 need a subscription?
-
From which Threat Defense release does FPR3130-NGFW-K9 support multi-instance mode?
-
Which Threat Defense releases can Firewall Management Center or Firewall Device Manager manage on FPR3130-NGFW-K9?
-
Can FPR3K-XNM-2X100G be broken out into 10G or 25G ports on FPR3130-NGFW-K9?
-
How much system memory and how many SSD bays does FPR3130-NGFW-K9 have?
-
How much does a fully populated FPR3130-NGFW-K9 weigh?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Deployed during business hours with no impact. Clean, fast installation.
Inspection went smoothly. Layer23 sends out clean product.
Same product, same quality, same great pricing. That’s why we keep ordering.