FPR3140-ASA-K9 – 49G ASA – 8x25G SFP28 + 8xRJ45 – 1RU 3140 ASA Firewall
Shop Expert-Recommended Accessories for the FPR3140-ASA-K9
Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.-
SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMFOriginal price was: $853.95.$52.00Current price is: $52.00. -
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMFOriginal price was: $2,439.88.$150.00Current price is: $150.00. -
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4Original price was: $1,213.85.$258.00Current price is: $258.00. -
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°COriginal price was: $1,335.84.$95.30Current price is: $95.30. -
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial TemperatureOriginal price was: $2,787.19.$431.00Current price is: $431.00. -
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOMOriginal price was: $1,260.58.$95.80Current price is: $95.80. -
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m ReachOriginal price was: $570.10.$70.00Current price is: $70.00. -
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOMOriginal price was: $633.46.$59.00Current price is: $59.00.
Why Layer23-Switch
Stocked, Shipped and Supported by One Team
Ships in 1 Business Day
In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.
LSCare Warranty
3years on enterprise equipment
Free CCIE Support
Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.
Verify Before You Pay
100%factory-sealed
Get label and serial photos before shipment, and check every serial number with Cisco.
FPR3140-ASA-K9 Description
The FPR3140-ASA-K9 is a Cisco Secure Firewall 3140 ASA appliance in the Secure Firewall 3100 Series for high-capacity internet edge, data center and VPN firewalls that run Cisco Secure ASA software. The appliance delivers 49 Gbps of stateful inspection throughput on 1500B UDP traffic and 17 Gbps of IPsec VPN with up to 20,000 peers, from eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot. The ASA image includes 2 security contexts, and more contexts up to 100 need add-on licenses.
Quick Specs
|
Parameter |
Specification |
|---|---|
|
Product ID |
FPR3140-ASA-K9 |
|
Product type |
Cisco Secure Firewall 3140 ASA appliance |
|
Security software role |
Cisco Secure ASA |
|
Form factor |
1RU |
|
Fixed data ports |
8 x RJ-45 and 8 x 1/10/25G SFP fixed ports |
|
Network module slot |
1 removable network module slot |
|
Supported module speeds |
1G 10G 25G 40G and 100G options for 3130 and 3140 |
|
Storage |
1 x 900 GB SSD with 1 spare slot |
|
Power supply configuration |
Dual 400W AC; single or dual 400W DC optional |
|
Stateful inspection firewall throughput |
49 Gbps |
|
ASA multiprotocol firewall throughput |
43 Gbps |
|
Concurrent firewall connections |
10 million |
Product Performance
Key Features
The appliance runs the ASA image, with Adaptive Security Device Manager for local management and Cisco Security Manager or Cisco Defense Orchestrator for central control.
Ten million concurrent firewall connections and 1.1 million new connections per second cover busy edge and data center gateways.
Eight RJ-45 ports and eight fixed SFP ports for 1G, 10G or 25G optics come on the base chassis, with 25G optics such as SFP-25G-SR-S supported.
The single network module bay accepts options with eight 1/10/25G ports, four 40G ports or two 100G ports, for as many as 24 Ethernet ports in total.
Two contexts are included and the maximum is 100, and up to eight chassis can join an ASA cluster.
Dual 400W AC supplies run 1+1 with optional DC supplies, and two hot-swappable fan modules cool the 1RU chassis front to rear.
Application Scenarios
At a large internet edge, the firewall applies ASA policy to 49 Gbps of stateful traffic, with fixed 25G SFP ports toward the upstream routers and RJ-45 ports for management and DMZ links.
A regional hub terminating thousands of site-to-site and remote-access tunnels can scale to 20,000 VPN peers on one appliance, with ASA 9.18 offload projecting 33 Gbps of IPsec.
A data center gateway can divide the appliance into security contexts for separate application zones, and a 40G or 100G network module adds the uplinks toward the core.
Product Comparison
|
Parameter |
FPR3140-ASA-K9 | ||
|---|---|---|---|
|
Stateful inspection firewall throughput |
49 Gbps |
42 Gbps |
Not applicable |
|
Stateful inspection firewall throughput (multiprotocol) |
43 Gbps |
39 Gbps |
Not applicable |
|
Concurrent firewall connections |
10 million |
6 million |
Not applicable |
|
New connections per second |
1,100,000 |
875,000 |
Not applicable |
|
IPsec VPN throughput (450B UDP L2L test) |
17 Gbps |
14 Gbps |
Not applicable |
|
Maximum VPN peers |
20,000 |
15,000 |
Not applicable |
|
Integrated I/O |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP |
|
Network modules |
8 x 1/10/25G, 4 x 40G options |
8 x 1/10/25G, 4 x 40G options |
8 x 1/10/25G, 4 x 40G options |
|
Power supply configuration |
Dual 400W AC; single or dual 400W DC optional |
Dual 400W AC; single or dual 400W DC optional |
Dual 400W AC; single or dual 400W DC optional |
FPR3140-ASA-K9 and FPR3130-ASA-K9 both run Cisco Secure ASA on the same 1RU chassis with eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot, and the 3140 is the larger ASA tier at 49 Gbps stateful throughput, 43 Gbps multiprotocol throughput, 10 million connections, 17 Gbps IPsec VPN and 20,000 VPN peers. Sites whose sizing fits 42 Gbps, 39 Gbps, 6 million connections, 14 Gbps and 15,000 peers can drop to FPR3130-ASA-K9. Sites that need Threat Defense rather than ASA on the 3140 hardware order FPR3140-NGFW-K9, which has no ASA security contexts.
Ordering Checklist
- Security contexts: ASA Base includes 2 security contexts; add L-FPR3K-ASASC-5= or L-FPR3K-ASASC-10= for more. Multi-context designs beyond 2 contexts need the add-on license on the order.
- Strong encryption: Add L-FPR3K-ENC-K9= if ASA strong encryption is required. It is a separate license and is export-controlled, so it cannot be fulfilled to restricted regions.
- Network module: Choose one of FPR3K-XNM-8X10G, FPR3K-XNM-8X25G, FPR3K-XNM-4X40G or FPR3K-XNM-2X100G for the single NetMod bay; FPR3K-NM-BLANK= covers an empty bay. The module is a separate line, and the bay holds only one.
- Power supplies: Choose dual 400W AC as standard, or single or dual 400W DC as the option. The power type is chosen on the order and decides which supplies arrive.
Optional Add-ons
|
Model |
Description |
|---|---|
|
FPR3K-XNM-8X10G |
3100 Series 8-port 1G/10G SFP+ network module |
|
FPR3K-XNM-8X25G |
3100 Series 8-port 1/10/25G ZSFP network module |
|
FPR3K-XNM-4X40G |
3100 Series 4-port 40G QSFP+ network module |
|
FPR3K-XNM-2X100G |
3100 Series 2-port 100G QSFP28 network module |
|
FPR3K-XNM-8X1GF |
8-port 10/100/1000Base-T hardware bypass network module |
|
FPR3K-XNM-6X10SRF |
6-port 10G SFP SR multimode hardware bypass network module |
|
FPR3K-XNM-6X10LRF |
6-port 10G SFP LR single-mode hardware bypass network module |
|
L-FPR3K-ASASC-10= |
Cisco Secure Firewall 3100 add-on 10 security context licenses |
|
L-FPR3K-ASASC-5= |
Cisco Secure Firewall 3100 add-on 5 security context licenses |
|
L-FPR3K-ENC-K9= |
Strong encryption license for ASA on Cisco Secure Firewall 3100 Series |
|
Cisco Secure Firewall 3100 Series 400W AC power supply | |
|
Cisco Secure Firewall 3100 Series 400W DC power supply | |
|
Cisco Secure Firewall 3100 Series SSD for FPR 3100 Series |
Specifications
| Parameter | Specification | Parameter | Specification |
|---|---|---|---|
| Product ID | FPR3140-ASA-K9 | Product type | Cisco Secure Firewall 3140 ASA appliance |
| Firewall model | Secure Firewall 3140 | Security software role | Cisco Secure ASA |
| Rack units | 1RU | Dimensions | 1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm) |
| Airflow | Front to rear; I/O side to non-I/O side | Fixed RJ-45 ports | 8 x 10M/100M/1GBASE-T Ethernet interfaces |
| Fixed SFP ports | 8 x 1/10/25 Gigabit Ethernet SFP interfaces | Maximum Ethernet ports | Up to 24 total Ethernet ports with network module |
| Network module slot | One removable network module slot named NM-2 | 3140 module options | 8 x 1/10/25G, 4 x 40G, and 2 x 100G options |
| Management port | 1 x 1/10G SFP management port | Console port | 1 x RJ-45 serial console |
| USB port | 1 x USB 3.0 Type-A port | SSD storage | 1 x 900 GB SSD with 1 spare slot |
| Fan modules | 2 hot-swappable fan modules with 2 fans each | Power supply configuration | Dual 400W AC; single or dual 400W DC optional |
| Power redundancy | 1+1 AC or DC with dual supplies | AC input voltage | 100 to 240V AC |
| AC maximum output power | 400W | DC input voltage | -48V to -60VDC |
| DC maximum output power | 400W | Stateful inspection firewall throughput | 49 Gbps |
| Multiprotocol firewall throughput | 43 Gbps | Concurrent firewall connections | 10 million |
| New connections per second | 1.1 million | IPsec VPN throughput | 17 Gbps |
| Projected IPsec VPN with offload | 33 Gbps with ASA 9.18 | Maximum VPN peers | 20000 |
| Security contexts | 2 included; 100 maximum | High availability | Active/active and active/standby |
| Clustering | 8 chassis | ASA centralized management | Cisco Security Manager or Cisco Defense Orchestrator |
| Local management | Adaptive Security Device Manager | ASA compatibility reference | ASA and ASDM compatibility listed for Secure Firewall 3105 3110 3120 3130 3140 |
| Operating temperature | 32 to 104F (0 to 40C) | Operating humidity | 10 to 85% noncondensing |
| Sound pressure | 65 dBA typical; 74 dBA maximum |
Quality Certifications
Customer Reviews
Questions & Answers
-
What throughput does FPR3140-ASA-K9 sustain with ASA firewall features enabled?
-
Does FPR3140-ASA-K9 run ASA or Threat Defense software, and which licenses add capacity?
-
What is the maximum VLAN count on FPR3140-ASA-K9?
-
How much system memory and how many SSD bays does FPR3140-ASA-K9 have?
-
How much does FPR3140-ASA-K9 weigh and how deep is the chassis?
-
How loud is FPR3140-ASA-K9 in operation?
Warranty
Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.
All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.
Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.
If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.
We support multiple secure payment and logistics options, backed by industry-leading verification:
Visit How to Pay page for more information
Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information
Verify, plan, and comparewith confidence
Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.
Their responsiveness during pre-sales matched our internal expectations.
Hardware is sturdy, well-built, and ready for production use.
Quality vendor, quality product, quality experience. Layer23 ticks every box.