What throughput does FPR3140-NGFW-K9 sustain with firewall, AVC and IPS enabled?

FPR3140-NGFW-K9 sustains 45 Gbps of FW + AVC + IPS throughput on 1024B traffic. TLS inspection runs at 11.5 Gbps with 50% TLS 1.2 traffic, and IPsec VPN reaches 22.4 Gbps with up to 20,000 peers, and the appliance holds 10 million concurrent sessions with AVC.

Do Malware, URL Filtering and IPS on FPR3140-NGFW-K9 need a Threat Defense subscription?

Yes, Malware, URL Filtering and IPS features on FPR3140-NGFW-K9 depend on Threat Defense subscriptions, and the appliance PID alone carries no subscription. Threat (T) is required before Malware (M) or URL (C) can be used, with a 1, 3 or 5 year term.

From which Threat Defense release does FPR3140-NGFW-K9 support multi-instance mode?

FPR3140-NGFW-K9 supports multi-instance mode from Threat Defense 7.4.1 onward. Release 7.4.0 and earlier do not support container instances on this appliance. Threat Defense 7.1 is the first release that runs on it, per the Threat Defense compatibility guide.

Which Threat Defense releases can Firewall Management Center or Firewall Device Manager manage on FPR3140-NGFW-K9?

Both managers support FPR3140-NGFW-K9 on Threat Defense 7.1, 7.2, 7.3, 7.4.1 to 7.4.x, 7.6, 7.7 and 10.x. Release 7.4.0 is not supported, per the Threat Defense compatibility guide.

Can FPR3K-XNM-2X100G be broken out into 10G or 25G ports on FPR3140-NGFW-K9?

Yes, each 100G port of FPR3K-XNM-2X100G breaks out into four 10G or four 25G ports. The module appears as ports E2/1 and E2/2 at 40 or 100 Gbps, up to 200 Gbps full duplex, per the Management Center 7.4 interfaces guide.

How much system memory and how many SSD bays does FPR3140-NGFW-K9 have?

FPR3140-NGFW-K9 has 256 GB of system memory and two field-replaceable SSD bays, with one SSD installed. The management port is a 10 Gbps SFP+ port and the console port is RJ-45, per the Secure Firewall 3100 hardware installation guide and ordering guide.

Does FPR3140-NGFW-K9 recognize FPR3K-XNM-8X25G and FPR3K-XNM-4X40G modules?

Yes, FPR3K-XNM-8X25G and FPR3K-XNM-4X40G are recognized in FPR3140-NGFW-K9, per the 3100 hardware maintenance guide. The 100G module and the 25G hardware bypass modules FPR3K-XNM-6X25SRF and FPR3K-XNM-6X25LRF are also listed for this appliance.

FPR3140-NGFW-K9 – 45G NGFW – 8x25G SFP28 + 8xRJ45 – 1RU 3140 NGFW Firewall

Name: FPR3140-NGFW-K9 - Cisco Secure Firewall 3140 NGFW Appliance
Brand: Cisco
SKU: FPR3140-NGFW-K9
Price: 45985.30 USD
Availability: InStock
Rating: 4.67 (3 reviews)

Brand: Cisco Category: Cisco Firepower 3100 Series Model: FPR3140-NGFW-K9

Rated 4.67 out of 5 based on 3 customer ratings

4.73 reviews7 Questions

List Price: ~~$172,563.96~~ 73% OFF

$45,985.30

Price Alert

In StockShips in as little as 1 business day Brand New

Related models

Cisco SN CheckSN verification before shipment.Verify authenticity3-Year WarrantyExtended, enterprise-gradeWarranty terms14-Day ReturnsStraightforward RMA processReturn policyExpress Shipping2-6 Business Daysvia UPS, FedEx, DHL and more

Trusted & Secure Payments

Shop Expert-Recommended Accessories for the FPR3140-NGFW-K9

Explore optics, stacking accessories, modules, and power supplies—all verified by our engineers for use with this model.

SFP-10G-SR-S
10GBASE-SR SFP+ - S-Class - 400m OM4 MMF
Original price was: $853.95.Current price is: $52.00.
SFP-10G-LR-S
10GBASE-LR SFP+ - S-Class - 10km SMF
Original price was: $2,439.88.Current price is: $150.00.
SFP-25G-SR-S
25GBASE-SR SFP28 - 850nm MMF - 100m OM4
Original price was: $1,213.85.Current price is: $258.00.
SFP-10/25G-CSR-S
10/25GBASE-CSR SFP28 - 850nm MMF - 300 m OM3 / 400 m OM4 - 0 to 70°C
Original price was: $1,335.84.Current price is: $95.30.
SFP-10/25G-LR-S
10/25GBASE-LR SFP28 - 10 km G.652 SMF - 0 to 70°C Commercial Temperature
Original price was: $2,787.19.Current price is: $431.00.
GLC-LH-SMD
1000BASE-LX/LH SFP - 10km SMF / 550m MMF - DOM
Original price was: $1,260.58.Current price is: $95.80.
GLC-TE
1000BASE-T SFP - RJ-45 Cat5 Copper - 100m Reach
Original price was: $570.10.Current price is: $70.00.
GLC-SX-MMD
1000BASE-SX SFP - MMF 850nm - DOM
Original price was: $633.46.Current price is: $59.00.

Why Layer23-Switch

Stocked, Shipped and Supported by One Team

Founded

Customers

Units shipped

Countries

Inventory You Can See

Cisco stock on hand

Models ready to ship

Warehouse space

Ships in 1 Business Day

In-stock orders leave our Hong Kong or U.S. warehouse within 1 business day after payment, with tracking by email.

DHL FedEx UPS Duties included: US · CA · UK

LSCare Warranty

3years on enterprise equipment

Advance replacement for in-stock models
New unit for dead-on-arrival
14-day returns on sealed items

Free CCIE Support

Certified engineers help before and after you buy. Reply within 1 business day by email or live chat.

Part number check Configuration Troubleshooting

Verify Before You Pay

100%factory-sealed

Get label and serial photos before shipment, and check every serial number with Cisco.

FPR3140-NGFW-K9 Description

The FPR3140-NGFW-K9 is a Cisco Secure Firewall 3140 next-generation firewall appliance in the Secure Firewall 3100 Series for internet edge and data center firewalls that run Cisco Secure Firewall Threat Defense. The appliance delivers 45 Gbps of FW + AVC + IPS throughput on 1024B traffic and 22.4 Gbps of IPsec VPN with up to 20,000 peers, from eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot. The Threat Defense image is separate from the ASA image, and Malware, URL Filtering and IPS features depend on subscriptions.

Quick Specs

Parameter	Specification
Product ID	FPR3140-NGFW-K9
Product type	Cisco Secure Firewall 3140 NGFW appliance
Security software role	Cisco Secure Firewall Threat Defense
Form factor	1RU
Fixed data ports	8 x RJ-45 and 8 x 1/10/25G SFP fixed ports
Network module slot	1 removable network module bay
Firewall throughput	49 Gbps
FW + AVC + IPS throughput	45 Gbps
Concurrent sessions with AVC	10 million
New connections per second with AVC	300000
IPsec VPN throughput	22.4 Gbps
Power supply configuration	Dual 400W AC; single or dual 400W DC optional

Product Performance

FW + AVC + IPS Throughput

Concurrent Sessions with AVC

IPsec VPN Throughput

Key Features

Threat Defense Inspection

With firewall, AVC and IPS enabled the appliance sustains 45 Gbps on 1024B traffic, and TLS inspection runs at 11.5 Gbps with 50% TLS 1.2 traffic.

Session And Connection Scale

Ten million concurrent sessions with AVC and 300,000 new connections per second set the ceiling for large server populations and busy edge links.

IPsec VPN Capacity

IPsec VPN reaches 22.4 Gbps, with a projected 39.4 Gbps under Threat Defense 7.2 VPN offload and support for up to 20,000 peers.

Mixed Copper And 25G Fixed Ports

Eight RJ-45 ports and eight fixed SFP ports for 1G, 10G or 25G optics come on the base chassis, and one module bay extends that to 24 ports.

Module Choices Up To 100G

The bay accepts options with eight 1/10/25G ports, four 40G ports or two 100G ports, so uplink speed can grow without a larger chassis.

Management And Clustering

Firewall Device Manager covers local management, Firewall Management Center or Cisco Defense Orchestrator handle central control, and up to eight chassis can form a cluster.

Application Scenarios

Enterprise Edge Inspection

At a large enterprise edge, the appliance inspects north-south traffic with firewall, Application Visibility and Control and IPS enabled at 45 Gbps, using the fixed 25G SFP ports toward upstream routers.

Data Center Firewall Tier

A data center firewall tier can rely on ten million concurrent sessions with AVC, and a 40G or 100G network module adds uplinks toward the spine.

Site-To-Site VPN Hub

A hub site terminating branch tunnels can use the 22.4 Gbps IPsec capacity and 20,000 VPN peers, with a projected 39.4 Gbps under Threat Defense 7.2 offload.

Product Comparison

Parameter	FPR3140-NGFW-K9	FPR3130-NGFW-K9	FPR3140-ASA-K9
Firewall throughput	49 Gbps	42 Gbps	Not applicable
Throughput: FW + AVC + IPS (1024B)	45 Gbps	38 Gbps	Not applicable
Maximum concurrent sessions, with AVC	10 million	6 million	Not applicable
Maximum new connections per second, with AVC	300,000	240,000	Not applicable
IPsec VPN throughput (1024B TCP w/Fastpath)	22.4 Gbps	17.8 Gbps	Not applicable
Maximum VPN peers	20,000	15,000	Not applicable
Integrated I/O	8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP	8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP	8 x 10M/100M/1GBASE-T RJ-45; 8 x 1/10/25 Gigabit SFP
Network modules	8 x 1/10/25G, 4 x 40G options	8 x 1/10/25G, 4 x 40G options	8 x 1/10/25G, 4 x 40G options
Power supply configuration	Dual 400W AC; single or dual 400W DC optional	Dual 400W AC; single or dual 400W DC optional	Dual 400W AC; single or dual 400W DC optional

FPR3140-NGFW-K9 and FPR3130-NGFW-K9 both run Threat Defense on the same 1RU chassis with eight RJ-45 ports, eight 1/10/25G SFP ports and one network module slot, and the 3140 is the larger tier at 49 Gbps firewall throughput, 45 Gbps FW + AVC + IPS throughput, 10 million sessions with AVC, 300,000 new connections per second and 22.4 Gbps IPsec VPN. Sites whose sizing fits 42 Gbps, 38 Gbps, 6 million sessions, 240,000 connections and 17.8 Gbps can drop to FPR3130-NGFW-K9. Sites that need Cisco Secure ASA rather than Threat Defense on the 3140 hardware order FPR3140-ASA-K9.

Ordering Checklist

Threat Defense subscription: Add L-FPR31x0T-* Threat Defense PIDs (T, TC, TM, TMC, URL or AMP) with a 1, 3 or 5 year term. Threat (T) is required before Malware (M) or URL (C) can be used, and the appliance PID alone carries no subscription.
Smart Licensing account: Make sure a Smart Software Manager account exists before Threat Defense software is ordered. Ordered licenses are deposited into that account after the order.
Network module: Choose one of FPR3K-XNM-8X10G, FPR3K-XNM-8X25G, FPR3K-XNM-4X40G or FPR3K-XNM-2X100G for the single NetMod bay; FPR3K-NM-BLANK= covers an empty bay. The module is a separate line, and the bay holds only one.
Power supplies: Choose dual 400W AC as standard, or single or dual 400W DC as the option. The power type is chosen on the order and decides which supplies arrive.

Optional Add-ons

Model	Description
FPR3K-XNM-8X10G	3100 Series 8-port 1G/10G SFP+ network module
FPR3K-XNM-8X25G	3100 Series 8-port 1/10/25G ZSFP network module
FPR3K-XNM-4X40G	3100 Series 4-port 40G QSFP+ network module
FPR3K-XNM-2X100G	3100 Series 2-port 100G QSFP28 network module
FPR3K-XNM-8X1GF	8-port 10/100/1000Base-T hardware bypass network module
FPR3K-XNM-6X10SRF	6-port 10G SFP SR multimode hardware bypass network module
FPR3K-XNM-6X10LRF	6-port 10G SFP LR single-mode hardware bypass network module
L-FPR3140T-AMP=	Cisco Secure Firewall 3140 Threat Defense Malware Protection license
L-FPR3140T-T=	Cisco Secure Firewall 3140 Threat Defense Threat Protection license
L-FPR3140T-URL=	Cisco Secure Firewall 3140 Threat Defense URL Filtering license
L-FPR3140T-TMC=	Cisco Secure Firewall 3140 Threat Defense Threat, Malware, and URL license
FPR3K-PWR-AC-400=	Cisco Secure Firewall 3100 Series 400W AC power supply
FPR3K-PWR-DC-400=	Cisco Secure Firewall 3100 Series 400W DC power supply
FPR3K-SSD900=	Cisco Secure Firewall 3100 Series 900 GB SSD
FPR3K-SLIDE-RAILS=	Cisco Secure Firewall 3100 Series slide rail kit

Specifications

Parameter	Specification	Parameter	Specification
Product ID	FPR3140-NGFW-K9	Product type	Cisco Secure Firewall 3140 NGFW appliance
Firewall model	Secure Firewall 3140	Security software role	Cisco Secure Firewall Threat Defense
Rack units	1RU	Dimensions	1.75 x 17 x 20 in. (4.4 x 43.3 x 50.8 cm)
Airflow	Front to rear; I/O side to non-I/O side	Fixed RJ-45 ports	8 x 10M/100M/1GBASE-T Ethernet interfaces
Fixed SFP ports	8 x 1/10/25 Gigabit Ethernet SFP interfaces	Maximum Ethernet ports	Up to 24 total Ethernet ports with network module
Network module slot	One removable network module bay	Supported module types	8-port 1/10G, 8-port 1/10/25G, 4-port 40G, and 2-port 100G network modules
Management port	1 x 1/10G SFP management port	Console port	1 x RJ-45 serial console
USB port	1 x USB 3.0 Type-A port	SSD storage	1 x 900 GB SSD with 1 spare slot
Fan modules	2 hot-swappable fan modules with 2 fans each	Power supply configuration	Dual 400W AC; single or dual 400W DC optional
Power redundancy	1+1 AC or DC with dual supplies	AC input voltage	100 to 240V AC
AC maximum output power	400W	DC input voltage	-48V to -60VDC
DC maximum output power	400W	Firewall throughput	49 Gbps
FW + AVC throughput	45 Gbps	FW + AVC + IPS throughput	45 Gbps
NGIPS throughput	45 Gbps	Concurrent sessions with AVC	10 million
New connections with AVC	300000 per second	TLS throughput	11.5 Gbps
IPsec VPN throughput	22.4 Gbps	Projected IPsec VPN with offload	39.4 Gbps with FTD 7.2
Maximum VPN peers	20000	On-Device management	Supported
Centralized management	Firewall Management Center or Cisco Defense Orchestrator	Weight	11.4 kg (25 lb) with 2 power supply modules, 1 network module, 2 dual fan modules, and 1 SSD
System power	100/240 VAC, 6A at 100 VAC, 50 to 60 Hz	Operating temperature	32 to 104F (0 to 40C)
Operating humidity	5 to 85% noncondensing	Operating altitude	10000 ft maximum
Power cord requirement	Approved Secure Firewall 3100 power cord or jumper power cord

Quality Certifications

Customer Reviews

Write A Review

4.7

Rated 4.67 out of 5

(3 reviews)

5 Stars

2

4 Stars

1

3 Stars

0

2 Stars

0

1 Stars

0

Lisa Jackson

Posted on 14/04/2026

Verified Buyer

Rated 4 out of 5

4.0

Express shipping was available when we needed it most.

Danny Watson

Posted on 20/03/2026

Verified Buyer

Rated 5 out of 5

5.0

We’ve made Layer23 part of our standard procurement process.

Hiroshi Rogers

Posted on 17/12/2025

Verified Buyer

Rated 5 out of 5

5.0

Installed during our maintenance window. Completed ahead of schedule.

Questions & Answers

What throughput does FPR3140-NGFW-K9 sustain with firewall, AVC and IPS enabled?
FPR3140-NGFW-K9 sustains 45 Gbps of FW + AVC + IPS throughput on 1024B traffic. TLS inspection runs at 11.5 Gbps with 50% TLS 1.2 traffic, and IPsec VPN reaches 22.4 Gbps with up to 20,000 peers, and the appliance holds 10 million concurrent sessions with AVC.
Do Malware, URL Filtering and IPS on FPR3140-NGFW-K9 need a Threat Defense subscription?
Yes, Malware, URL Filtering and IPS features on FPR3140-NGFW-K9 depend on Threat Defense subscriptions, and the appliance PID alone carries no subscription. Threat (T) is required before Malware (M) or URL (C) can be used, with a 1, 3 or 5 year term.
From which Threat Defense release does FPR3140-NGFW-K9 support multi-instance mode?
FPR3140-NGFW-K9 supports multi-instance mode from Threat Defense 7.4.1 onward. Release 7.4.0 and earlier do not support container instances on this appliance. Threat Defense 7.1 is the first release that runs on it, per the Threat Defense compatibility guide.
Which Threat Defense releases can Firewall Management Center or Firewall Device Manager manage on FPR3140-NGFW-K9?
Both managers support FPR3140-NGFW-K9 on Threat Defense 7.1, 7.2, 7.3, 7.4.1 to 7.4.x, 7.6, 7.7 and 10.x. Release 7.4.0 is not supported, per the Threat Defense compatibility guide.
Can FPR3K-XNM-2X100G be broken out into 10G or 25G ports on FPR3140-NGFW-K9?
Yes, each 100G port of FPR3K-XNM-2X100G breaks out into four 10G or four 25G ports. The module appears as ports E2/1 and E2/2 at 40 or 100 Gbps, up to 200 Gbps full duplex, per the Management Center 7.4 interfaces guide.
How much system memory and how many SSD bays does FPR3140-NGFW-K9 have?
FPR3140-NGFW-K9 has 256 GB of system memory and two field-replaceable SSD bays, with one SSD installed. The management port is a 10 Gbps SFP+ port and the console port is RJ-45, per the Secure Firewall 3100 hardware installation guide and ordering guide.
Does FPR3140-NGFW-K9 recognize FPR3K-XNM-8X25G and FPR3K-XNM-4X40G modules?
Yes, FPR3K-XNM-8X25G and FPR3K-XNM-4X40G are recognized in FPR3140-NGFW-K9, per the 3100 hardware maintenance guide. The 100G module and the 25G hardware bypass modules FPR3K-XNM-6X25SRF and FPR3K-XNM-6X25LRF are also listed for this appliance.

Warranty

100% Low Price Guarantee:

Layer23-Switch.com offers genuine, high-quality ICT products at competitive wholesale prices—ensuring exceptional value without compromising quality.

100% Quality Assurance:

All items are brand new, original, and factory-sealed.
Upon request, each unit can be fully tested and verified by a Cisco CCIE-certified engineer to ensure perfect working condition before shipment.

Free CCIE Technical Support:

Our Cisco CCIE-certified experts provide free professional support via phone, email, online chat, or remote login—helping you deploy and troubleshoot with confidence.

100% Money Back Guarantee:

If you are not satisfied with your purchase, you may request an exchange or full refund. Our customer service team will guide you through the return process quickly and smoothly. Visit Return Policy page for more information.

Flexible & Secure Payment and Shipping:

We support multiple secure payment and logistics options, backed by industry-leading verification:

Visit How to Pay page for more information

Warranty Coverage & RMA Instructions

Extended, Worry-Free Warranty Coverage Factory New Sealed Enterprise Hardware:
· 3 Years Factory New Sealed
Visit Warranty Policy page for more information

FREE NETWORK TOOLS

Verify, plan, and comparewith confidence

Use practical tools to check device details, review lifecyclemilestones, and compare hardware before you buy.

Check lifecycle dates

Cisco Switch Selector Tool

Filter Cisco switches by ports, uplinks, PoE, performance, features, license, and budget.

Find matching switches >

Cisco Serial Number Lookup

Verify authenticity and identify exactmodel, coverage, and lifecycle detailsusing a Cisco serial number.

Verify a serial number >

Product Comparison

Compare specifications, capabilitiesand form factors side-by-side tochoose the right hardware.

Cisco Compare products >

DataSheet Downloads

FPR3140-NGFW-K9 Datasheet

FPR3140-NGFW-K9 – 45G NGFW – 8x25G SFP28 + 8xRJ45 – 1RU 3140 NGFW Firewall

Shop Expert-Recommended Accessories for the FPR3140-NGFW-K9

Stocked, Shipped and Supported by One Team

Inventory You Can See

Ships in 1 Business Day

LSCare Warranty

Free CCIE Support

Verify Before You Pay

FPR3140-NGFW-K9 Description

Quick Specs

Product Performance

Key Features

Application Scenarios

Product Comparison

Ordering Checklist

Optional Add-ons

Specifications

Quality Certifications

Customer Reviews

Questions & Answers

What throughput does FPR3140-NGFW-K9 sustain with firewall, AVC and IPS enabled?

Do Malware, URL Filtering and IPS on FPR3140-NGFW-K9 need a Threat Defense subscription?

From which Threat Defense release does FPR3140-NGFW-K9 support multi-instance mode?

Which Threat Defense releases can Firewall Management Center or Firewall Device Manager manage on FPR3140-NGFW-K9?

Can FPR3K-XNM-2X100G be broken out into 10G or 25G ports on FPR3140-NGFW-K9?

How much system memory and how many SSD bays does FPR3140-NGFW-K9 have?

Does FPR3140-NGFW-K9 recognize FPR3K-XNM-8X25G and FPR3K-XNM-4X40G modules?

Warranty

Verify, plan, and comparewith confidence

Cisco Switch Selector Tool

Cisco Serial Number Lookup

Product Comparison

DataSheet Downloads

Related Searches of Cisco Firepower 3100 Series